swiley @swiley@social.cleverlibre.org

@marathon No.
You're supposed to hash the certificate in the META folder and see if it matches. The certificate contains a PKI signature of the apk contents (I guess?)

@marathon Yeah, I haven't read the source but that's definitely pulling the zip file apart and doing something special rather than just hashing it.

@marathon It would have to be the hash of a signature anyway, not the file hash.

@marathon That's not my impression of how this works, my skimming of the android documentation strongly implies that the zip file hash isn't what's checked for verification.

@marathon Yeah idk, it wasn't an android specific post. I'd recommend installing the android sdk (I'm not really interested in putting my machine through that.) and checking with their signing tool.

@marathon SO says
`openssl pkcs7 -inform DER -in META-INF/CERTIFIC.RSA -noout -print_
certs -text | openssl sha256 -c`
But that doesn't give me a matching hash either, idk.

@marathon It looks like you're supposed to check the fingerprint of the .RSA file in the META folder although I couldn't figure out that without the android sdk tools. It looks like openssl will generate an X509 cert from it for you though.

@hansw I'm definitely too stupid to figure out how to get the apk.

@hansw I don't use signal but you should post the hash/method so other people can verify.

@geotechland It's the addiction. I definitely have a hard time with social media.
Even hackernews and mastodon are pretty bad, but the nice thing about those is that they at least give you tools to help manage it.
Hackernews has noprocrast which helps a lot (I wish qoto.org had that) and mastodon lacks automatic curation so you run out of content pretty quickly.

@geotechland I wish I didn't use youtube so often, I think it's bad for my mental health.

@PauITown @nerdman @Zest @freemo There's also stuff like chemplayer though. I'm still mad at youtube for banning him/her.

@freemo @PauITown @Zest I bought a book on it that I plan on going through after I get through this topology book I'm reading.
I'm currently hung up on this part where they turn path homotpy classes into a multiplicative group. The multiplication operator just isn't making sense to me.

@icedquinn I'm from the US. I took multiple civics classes in highschool and college and have visited both the federal capitol and my state capitol (the tour guide even had us press the buttons in the legislature to vote on a fake bill.) I pay attention to current events and vote.
I still get them confused.

@freemo @PauITown @Zest Even after college my intuition for tensor multiplication is pretty weak.

@Zest @freemo @Science This is probably one of those situations where you really need to build things up axiomatically and not rely on intuition.

@valleyforge wiimote whiteboard was pretty good. I think the latest Linux has support for switch joycons, half of witch have the necessary hardware. I've been meaning to add one to my projector setup but haven't gotten around to it.