Post
Topic
Board Wallet software
Re: Is anybody using OWNR wallet?
by
pooya87
on 24/02/2020, 04:44:40 UTC
Yes but as I posted someplace else, it's somewhat a false security.
Do you check the hash of the file you downloaded against what is posted?

i get your point and we can discuss a lot about open source and security. for instance since you mentioned hash it reminded me of a common issue among all open source wallets:
a lot of projects (even the popular ones) that are open source, release a compiled version which majority of users download. in other words it doesn't make a difference for them if the project were open source or not since they are still downloading a binary (like a .exe for windows) even if they or someone else had reviewed the code. you still don't know if the binary belongs to the same code or not!

this issue is partially solved when these projects use a deterministic builds but now there is another problem where people who compile from source code don't compare the hashes to see if it were legit. i opened.
https://bitcointalk.org/index.php?topic=5195281.0
https://bitcointalk.org/index.php?topic=5212057.0