How do I or someone else audit graphineos updates, Drama?

For context, this video got me a little spooked about my current OS, I never was super comfortable with their "overnight update" style despite it being more secure. How do they prevent unsafe binaries from a rouge employee being pushed to the device, deviating from / hidden in its open source roots, I know manually self-compiling to validate is complicated and may get diffrent results than the official rom. If I need to switch away, what to? I need update integrity over speed. Also Magisk would be nice.

24 points · 7 comments · view on lemmy.world

7 Comments

degen@midwest.social · 9 pts · 3y (3 replies)

This comment explains the drama and concerns pretty well. In short, the problematic lead stepped down and there isn't really a reason to discredit the dev team as a whole.

As far as auditing goes, the code is available on GitHub. Only slightly joking, following release updates would be a good way to see what's changing at a high level.

Plopp@lemmy.world · 1 pts · 3y (2 replies)

Did you link the wrong comment?

dataprolet@lemmy.dbzer0.com · 2 pts · 3y

Don't think so, it links to the statement by thehatedone, right?

degen@midwest.social · 1 pts · 3y

It should be right, like Dataprolet said. Lemmy's handling of linked comments can be confusing though.

somedaysoon@lemmy.world · 8 pts · 3y
[ removed ]
WtfEvenIsExistence@reddthat.com · 3 pts · 3y (2 replies)
[ removed ]
PipedLinkBot@feddit.rocks · 3 pts · 3y

Here is an alternative Piped link(s): https://piped.video/4To-F6W1NT0

Piped is a privacy-respecting open-source alternative frontend to YouTube.

I'm open-source, check me out at GitHub.

HelloHotel@lemmy.world · 2 pts · 3y

Kinda where my fears began

PipedLinkBot@feddit.rocks · 2 pts · 3y

Here is an alternative Piped link(s): https://piped.video/watch?v=Dx7CZ-2Bajg

Piped is a privacy-respecting open-source alternative frontend to YouTube.

I'm open-source, check me out at GitHub.