No, you can't verify the checksum; it downloads and runs new code without asking... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		sneak on Jan 15, 2021 \| parent \| context \| favorite \| on: Signal is having technical difficulties No, you can't verify the checksum; it downloads and runs new code without asking. https://github.com/signalapp/Signal-Desktop/issues/4578

eins1234 on Jan 16, 2021 [–]

Wow... I was totally convinced by the security argument until I read through this thread, which completely obsoletes that premise. It's no different from a PWA (like WhatsApp) in its update behavior then.

Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact