Submitted via IRC for SoyCow3941
Security researchers have found a security flaw in Electron, a software framework that has been used in the past half-decade for building a wealth of popular desktop applications.
Apps built on top of Electron include Microsoft's Skype and Visual Studio Code, GitHub's Atom code editor, the Brave browser, along with official desktop apps for services like Signal, Twitch, Discord, Basecamp, Slack, Ghost, WordPress.com, and many more.
The framework has become very popular among today's software development community because it allows developers to easily port web-based apps coded in HTML, JS, and CSS to run on the desktop. The software framework is a custom API wrapped around the Node.js server-side JavaScript server.
Source: https://www.bleepingcomputer.com/news/security/security-flaw-impacts-electron-based-apps/
(Score: 4, Insightful) by Anonymous Coward on Tuesday May 22 2018, @03:40PM (2 children)
People will look back on this era, and shake their heads in disbelief at the utterly ramshackle nature of software "engineering" (i.e., asking StackOverflow a question, and then copy-pasting the answer into production code).
The bell curve needs culling.
(Score: 4, Funny) by BsAtHome on Tuesday May 22 2018, @04:02PM
Yes, indeed, the bell curve must be culled. Lets all agree then that we should strive to have all our programmers at the Balmer Peak(*) level. Then anything will work, fast, good, perfect, great and flawless.
Cheers!
(*) for details, see XKCD #323
(Score: 2) by takyon on Tuesday May 22 2018, @04:02PM
Never going to happen.
[SIG] 10/28/2017: Soylent Upgrade v14 [soylentnews.org]