Oddbean new post about | logout
 AppVerifier does it

getting the signatures is the hard part