Does an open source keyboard exist for iOS that respect your privacy?

Does apple get what you type on the keyboard in their servers?

  • RovingFox@infosec.pub
    172·
    11 months ago

    Even if the keyboard is open source, you cannot guarantee that the app that is installed by the app store is the open source version.

      • RovingFox@infosec.pub
        42·
        11 months ago

        Not true, you get the open source code and you compile it yourself then compare the checksum of what you compiled with app installer. If they match that means they didn’t add extra code besides whats in the open source.

        • tsonfeir@lemm.ee
          12·
          11 months ago

          Yes, the binary downloaded from an open source project might be different from the binary compiled on your own computer, even if they are from the same source code. Here are a few reasons why this can happen:

          1. Compiler Differences: Different compilers or different versions of the same compiler can produce binaries with variations in performance and size.

          2. Build Environment: The environment in which the binary is compiled, including the operating system and its version, libraries, and other dependencies, can affect the outcome.

          3. Configuration Options: Most open source projects have various configuration options which can be enabled or disabled during the build process. The pre-compiled binaries might have a different set of configurations compared to what you choose when compiling it yourself.

          4. Optimization Levels: Compilers have different optimization levels and settings. The binary provided by the project may be optimized for general compatibility, while you might compile with optimizations specific to your hardware.

          5. Patches or Modifications: The official binary might include patches or modifications that are not present in the source code you downloaded, especially if it’s from a different branch or a snapshot of the repository at a different time.

          6. Reproducible Builds: Some projects aim for reproducible builds, where the same source code should generate an identical binary, but this is a challenging goal and not all projects achieve it.

          Always ensure that you trust the source of any pre-compiled binaries, as they could potentially include malicious code not present in the source.

          ❤️

          • intrepid@lemmy.ca
            2·
            11 months ago

            You’re right of course. But just to add - ‘reproducible builds’ is an ongoing attempt to make hash comparisons practical.

            • tsonfeir@lemm.ee
              1·
              11 months ago

              It’s also a lot easier to do this on a desktop/server environment. Doing this on a popular mobile device would be difficult, and would require the OS developer be involved (and I doubt Google or Apple would be that open)

        • nick
          5·
          11 months ago

          There are valid reasons the checksum might differ, just depends on