[Git][reproducible-builds/reproducible-website][master] 2022-12: fix pronouns & typo
FC Stegerman (@obfusk)
gitlab at salsa.debian.org
Thu Jan 5 10:32:59 UTC 2023
FC Stegerman pushed to branch master at Reproducible Builds / reproducible-website
Commits:
e7d34881 by FC Stegerman at 2023-01-05T11:30:55+01:00
2022-12: fix pronouns & typo
- - - - -
1 changed file:
- _reports/2022-12.md
Changes:
=====================================
_reports/2022-12.md
=====================================
@@ -60,13 +60,13 @@ On [our mailing list](https://lists.reproducible-builds.org/listinfo/rb-general/
*obfusk* (FC Stegerman) [performed a thought-provoking review](https://gist.github.com/obfusk/c51ebbf571e04ddf29e21146096675f8) of tools designed to determine the difference between two different `.apk` files shipped by a number of free-software instant messenger applications.
-These scripts are often necessary in the Android/APK ecosystem due to these files containing embedded signatures so the conventional bit-for-bit comparison cannot be used. After detailing a litany of issues with these tools, he comes to the conclusion that:
+These scripts are often necessary in the Android/APK ecosystem due to these files containing embedded signatures so the conventional bit-for-bit comparison cannot be used. After detailing a litany of issues with these tools, they come to the conclusion that:
> It's quite possible these messengers actually have reproducible builds, but the verification scripts they use don't actually allow us to verify whether they do.
-This reflects the consensus view within the Reproducible Builds project: pursuing a situation in language or package ecosystems where binaries are bit-for-bit identical (over requiring a bespoke ecosystem-specific tool) is not a luxury demanded by purist engineers, but rather the only *practical* way to demonstrate reproducibility. *obfusk* also [announced the first release of his own set of tools](https://lists.reproducible-builds.org/pipermail/rb-general/2022-December/002769.html) on our mailing list.
+This reflects the consensus view within the Reproducible Builds project: pursuing a situation in language or package ecosystems where binaries are bit-for-bit identical (over requiring a bespoke ecosystem-specific tool) is not a luxury demanded by purist engineers, but rather the only *practical* way to demonstrate reproducibility. *obfusk* also [announced the first release of their own set of tools](https://lists.reproducible-builds.org/pipermail/rb-general/2022-December/002769.html) on our mailing list.
-Related to this, *obfusk* also [posted to an issue filed against Mastodon](https://github.com/mastodon/mastodon-android/issues/4#issuecomment-1336259343) regarding the difficulties of validating the APK, epsecially with respect to [v2/v3 APK signatures](https://source.android.com/docs/security/features/apksigning/v2), and he also reported that some APK ordering differences were not caused by building on MacOS after all, but by using [Android Studio](https://developer.android.com/studio) [[...](https://gitlab.com/fdroid/fdroiddata/-/issues/2816#note_1204147286)].
+Related to this, *obfusk* also [posted to an issue filed against Mastodon](https://github.com/mastodon/mastodon-android/issues/4#issuecomment-1336259343) regarding the difficulties of validating the APK, especially with respect to [v2/v3 APK signatures](https://source.android.com/docs/security/features/apksigning/v2), and they also reported that some APK ordering differences were not caused by building on MacOS after all, but by using [Android Studio](https://developer.android.com/studio) [[...](https://gitlab.com/fdroid/fdroiddata/-/issues/2816#note_1204147286)].
---
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/e7d34881cf9af853512e1de5d021ad922653a922
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/e7d34881cf9af853512e1de5d021ad922653a922
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20230105/977e08a5/attachment.htm>
More information about the rb-commits
mailing list