Engineer with beard.

France
BarbossHack retweeted
I’m a Rust compiler maintainer looking for a full-time role focused on Rust-related open-source work. While I’m currently employed, I’d like my next role to let me continue contributing upstream to the Rust compiler. I’m based in Japan and am not looking to relocate, but I can travel occasionally. Introductions and reposts would be appreciated! tako8ki.com/posts/looking-fo…
13
136
624
67,661
Most people trust open-source messengers for privacy. Very few check if their builds are actually reproducible. I verified the main ones. Some pass. Some fail. Some don’t even try. Full status 👇 github.com/BarbossHack/repro…
3
103
I've successfully verified the reproducibility of @ThreemaApp ✅ Thanks, @ThreemaApp, for gifting me the paid app, which allowed me to verify it 🫶
2
1
4
101
Nouvelle technique de phishing : les escrocs exploitent les mails officiels d'ameli.fr, qui échappent donc aux filtres anti-spam 🎣 Ils vous créent un compte sur le forum Ameli avec en "nom" le message d'arnaque et un numéro @onoff à contacter ☎️ @Assur_Maladie
1
270
BarbossHack retweeted
Replying to @BarbossHack
Thank you for this @BarbossHack 🥰! And sorry for the very late reaction 😏! We really appreciate the work verifying this 🙏.
1
1
127
Has no one verified @telegram iOS reproducible builds since 2023? 😳 They recommend using darwin-containers, but it only supports macOS ≤13.6, while the current Telegram.ipa is built on macOS 26 Also requires patching Xcode to downgrade MetalToolchain to match Telegram’s build
1
1
103
I've verified it for you: Telegram iOS builds are reproducible ✅ github.com/BarbossHack/repro…
1
69
Hi @signalapp @mer__edith , we are still waiting for Signal iOS reproducible builds 🙏
48
With the latest update, when @signalapp messages expire, they are immediately deleted from the local database. Previously, this cleanup could be delayed by several days, leaving data temporarily recoverable. Forensic operations can no longer retrieve expired messages.
1
132
The F-Droid variant of @olvid_io was verified as reproducible ✔️ github.com/BarbossHack/repro…
1
1
115
The @ProtonMail android app has been open-sourced again after six months. I still need to check the reproducibility of all the past releases 👌
It's been 6 months since @ProtonMail (android app) stopped being open-source ⏳
1
1
278
Proton Mail is not reproducible ❌
73
BarbossHack retweeted
I finally found the time to check it: the @fdroidorg reproducible builds process is flawed, and currently Element X is not reproducible (neither the Playstore nor the F-Droid variant)
1
128
It looks like no one is actually testing @telegram reproducible builds against Play Store APKs. I found errors in their bundle process, and their apkfrombundle script always returns "APK has difference!" (don't get me wrong: no backdoors, just a broken bundle process)
116
BarbossHack retweeted
✨ La Quête d’Ewilan débarque en série animée ! Fidèle adaptation du roman de Pierre Bottero, à découvrir dès maintenant sur France.tv et Okoo (France), Auvio (Belgique) et Play RTS (Suisse). 🌀 Propulsée dans le monde de Gwendalavir à seulement 13 ans, Camille voit son destin basculer et apprend la vérité sur ses origines. Cette sortie marque le tout premier chapitre de la collaboration entre Ankama Animations et Andarta Pictures. ❤
21
147
773
34,047
It's been 6 months since @ProtonMail (android app) stopped being open-source ⏳
It's been 5 months since @ProtonMail stopped being open-source ⏳
1
848
Je vois bcp de gens débattre autour du sujet de contrôle des VPN J'ai l'impression que ce sujet nous fait avant tout oublier le projet de loi adopté à l’Assemblée nationale, imposant une vérification de l’âge sur les réseaux sociaux. Habile.
3
12
4,337
If you want to verify @signalapp’s 𝐫𝐞𝐩𝐫𝐨𝐝𝐮𝐜𝐢𝐛𝐢𝐥𝐢𝐭𝐲, don’t just run their apkdiff script. You must also verify 𝐥𝐢𝐛𝐬𝐢𝐠𝐧𝐚𝐥 (not checked by apkdiff). That’s where all the network & cryptographic operations are implemented❗️ Both are currently reproducible ✅
152
It's been 5 months since @ProtonMail stopped being open-source ⏳
Ok, so @ProtonMail is not open-source anymore? - No updates in the past 4 months (since July 31). - They're making it look active on GitHub by publishing fake releases/tags that point to a four-month-old, outdated version. Is this a big red flag 🚩 @ProtonPrivacy?
1
818