F-Droid calls Amethyst closed source because they can't verify the app matches the source code, because something about the build process changes the signature every time it's compiled
Vitor says this is due to something involved in the Tor Android library and he refuses to offer a version without Tor. It seems to me like maybe he understands the importance of anonymity sets, more than the importance of pure verifiable open source code
But he made the point that if F-Droid's focus is verifying which apps are open source, then they should just call his app closed source instead of blocking it from their store
He's right - F-Droid getting rid of the censored app store to focus on raising awareness would be more effective, since what they're doing now has not resulted in any major public awareness of the need for a fixed Android Tor library or anything like that
🇵🇸 whoever loves Digit
npub1wa…6u3l2
2025-09-01 18:17:12 UTC
in reply to nevent1q…qe68
Author Public Key
npub1wamvxt2tr50ghu4fdw47ksadnt0p277nv0vfhplmv0n0z3243zyq26u3l2Published at
2025-09-01 18:17:12 UTCEvent JSON
{
"id": "19503d30b9dc888e475ab8fcc00d1c460862eb48a7a323c73a2dab9129740169",
"pubkey": "7776c32d4b1d1e8bf2a96babeb43ad9ade157bd363d89b87fb63e6f145558888",
"created_at": 1756750632,
"kind": 1,
"tags": [
[
"e",
"c1e42116b09002927a2be0a3c02df015538c55e3214d55d5c1fefa6df9edb4ef",
"wss://nos.lol/",
"root",
"d5a9b3661fee8b6e60b3eac3543d83dbffa6486f62ec76744ca38967203efe49"
],
[
"e",
"cc8ac86f272a9ac4250c615935033a291c4abd1d8c9d20e1a92bc5c20b4dc09e",
"wss://nos.lol/",
"reply",
"faafb1f49a72d9bbe60e7539ce9d643fa76fb8e63cd279ad4128a067a28fc51a"
],
[
"p",
"d5a9b3661fee8b6e60b3eac3543d83dbffa6486f62ec76744ca38967203efe49"
],
[
"p",
"460c25e682fda7832b52d1f22d3d22b3176d972f60dcdc3212ed8c92ef85065c"
],
[
"p",
"ca89cb11f1c75d5b6622268ff43d2288ea8b2cb5b9aa996ff9ff704fc904b78b"
],
[
"p",
"faafb1f49a72d9bbe60e7539ce9d643fa76fb8e63cd279ad4128a067a28fc51a"
],
[
"client",
"jumble"
]
],
"content": "F-Droid calls Amethyst closed source because they can't verify the app matches the source code, because something about the build process changes the signature every time it's compiled\n\nVitor says this is due to something involved in the Tor Android library and he refuses to offer a version without Tor. It seems to me like maybe he understands the importance of anonymity sets, more than the importance of pure verifiable open source code\n\nBut he made the point that if F-Droid's focus is verifying which apps are open source, then they should just call his app closed source instead of blocking it from their store\n\nHe's right - F-Droid getting rid of the censored app store to focus on raising awareness would be more effective, since what they're doing now has not resulted in any major public awareness of the need for a fixed Android Tor library or anything like that",
"sig": "c5327d3a618eff4fb682b7668720f5db499c7c3426895269600031b64070cdc27730b042268ec4b481106c892fc6c79bb6056d5efb676eada1f1d369661f3f54"
}