Open source keyboard for iOS?

RovingFox , 6 months ago

Even if the keyboard is open source, you cannot guarantee that the app that is installed by the app store is the open source version.

tsonfeir , 6 months ago

The same can be said about any binary as well.

RovingFox , 6 months ago

Not true, you get the open source code and you compile it yourself then compare the checksum of what you compiled with app installer. If they match that means they didn't add extra code besides whats in the open source.

tsonfeir , 6 months ago

Yes, the binary downloaded from an open source project might be different from the binary compiled on your own computer, even if they are from the same source code. Here are a few reasons why this can happen:

1. Compiler Differences: Different compilers or different versions of the same compiler can produce binaries with variations in performance and size.

2. Build Environment: The environment in which the binary is compiled, including the operating system and its version, libraries, and other dependencies, can affect the outcome.

3. Configuration Options: Most open source projects have various configuration options which can be enabled or disabled during the build process. The pre-compiled binaries might have a different set of configurations compared to what you choose when compiling it yourself.

4. Optimization Levels: Compilers have different optimization levels and settings. The binary provided by the project may be optimized for general compatibility, while you might compile with optimizations specific to your hardware.

5. Patches or Modifications: The official binary might include patches or modifications that are not present in the source code you downloaded, especially if it's from a different branch or a snapshot of the repository at a different time.

6. Reproducible Builds: Some projects aim for reproducible builds, where the same source code should generate an identical binary, but this is a challenging goal and not all projects achieve it.

Always ensure that you trust the source of any pre-compiled binaries, as they could potentially include malicious code not present in the source.

❤️