F-Droid calls Amethyst closed source because they can't verify the app matches the source code, because something about the build process changes the signature every time it's compiled
Vitor says this is due to something involved in the Tor Android library and he refuses to offer a version without Tor. It seems to me like maybe he understands the importance of anonymity sets, more than the importance of pure verifiable open source code
But he made the point that if F-Droid's focus is verifying which apps are open source, then they should just call his app closed source instead of blocking it from their store
He's right - F-Droid getting rid of the censored app store to focus on raising awareness would be more effective, since what they're doing now has not resulted in any major public awareness of the need for a fixed Android Tor library or anything like that
For me it sounds quite alarming that the source code for whatever reason can't be verified completely (!! #wtf)
Also alarming is why Vitor refuses to provide an #F-Droid version with #Orbot -outsourced #Tor option. This is not a big deal imho.
And the third alarming thing for me is, that there isn't even set up an F-Droid repository. Instead they recommend #Goolag PlayStore.
What an utter mess!! So I have to consider #Amethyst dead and #compromised.
How can I trust my privacy to such a fishy project?
Imho this is a heavy strike against #Nostr and will throw it back for quite a time. Disgusting.
