syntheticcorp

Counting CVEs is not a good way of comparing security between software.

It's indexed on Google and you can find it by searching for phrases from the posted screenshots. Be careful opening the files on there.

If an attacker compromises your machine and steals your password they can also just route their traffic through it, meaning the IP would match the regular one seen by the Ring servers

That article has some inaccuracies, particularly around brute forcing iPhones in DFU mode which is nowhere near as practical as they make it sound on newer models with Secure Enclaves.

OK, thanks for providing those details. Thankfully I've not encountered this anywhere before in Australasia.

Yes, this is generally called "reproducible builds". Signal has reproducible builds for Android, here is how to build it and compare against the one on your phone:

https://github.com/signalapp/Signal-Android/blob/master/Repr...

Could you elaborate on this a bit please?

What is the appliance called? Do all HTTP requests flow through it and anything else bypasses it? Does it store or log any of the requests or responses?