[3rodents]

By that standard, it can never be verified because what is running and what is reviewed could be different. Reviewing relevant elements is as meaningful as reviewing all the source code.

[dangus]

Let’s be real: the standard is “Do we trust Meta?”

I don’t, and don’t see how it could possibly be construed to be logical to trust them.

I definitely trust a non-profit open source alternative a whole lot more. Perception can be different than reality but that’s what we’ve got to work with.

[giancarlostoro]

Or they could even take out the backdoor code and then put it back in after review.

[hedora]

This is why signal supports reproducible builds.

[pdpi]

In this day and age, in a world with Docker and dev containers and such, it's kind of shocking that reproducible builds aren't table stakes.

[LtWorf]

Does it still require the gigantic binary blob?

[taneq]

Ah yes, the Volkswagen solution.

[KellyCriterion]

++1

"target market product alignment" :-D