Mobile app only and no source code? I appreciate the effort but I'll stick with Mastodon for now.
- The API keys are obtained using flutter_dotenv, and omitted from the Git source but trivially extractable from the Play Store APK (using a rooted phone).
- After installing the .env file and building t4t locally, I was unable to log into the Android app using a Gmail account; every attempt left the app in a not-logged-in state. The same thing happened after replacing my local app with the Play Store version? (EDIT: After restarting the app I was able to proceed?)
- (nitpick/observation) When I tap a post, the app opens the user's post history, and I try scrolling the list, the view lags behind my finger. Can't tell if it's latency, dropped frames, or both together.
The way that some people on HN so casually demand someone to build something and then completely give it away never ceases to disappoint. Thankfully the fact that this community is growing tells me this is not how most people think.
Realistically, you will always need a minimum amount of trust, just don't misplace it.
Also, compiling and verifying software updates is pretty easy for typical application programs. I do it for cryptocurrency software, you just look over diffs and make sure it matches up to the changelog.
The build and what’s hosted have to be the same.