Stories
Slash Boxes
Comments

SoylentNews is people

Security Flaw Impacts Electron-Based Apps

posted by Fnord666 on Tuesday May 22 2018, @03:17PM   Printer-friendly
from the another-day-another-flaw dept.

MrPlow writes:

Submitted via IRC for SoyCow3941

Security researchers have found a security flaw in Electron, a software framework that has been used in the past half-decade for building a wealth of popular desktop applications.

Apps built on top of Electron include Microsoft's Skype and Visual Studio Code, GitHub's Atom code editor, the Brave browser, along with official desktop apps for services like Signal, Twitch, Discord, Basecamp, Slack, Ghost, WordPress.com, and many more.

The framework has become very popular among today's software development community because it allows developers to easily port web-based apps coded in HTML, JS, and CSS to run on the desktop. The software framework is a custom API wrapped around the Node.js server-side JavaScript server.

Source: https://www.bleepingcomputer.com/news/security/security-flaw-impacts-electron-based-apps/

Original Submission

 
This discussion has been archived. No new comments can be posted.
Security Flaw Impacts Electron-Based Apps | Log In/Create an Account | Top | 15 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 4, Insightful) by crafoo on Tuesday May 22 2018, @06:51PM (4 children)

    by crafoo (6639) on Tuesday May 22 2018, @06:51PM (#682758)

    Right! Fuck it! Hardware is cheap! Can we go deeper? Can we wrap this in yet another "abstraction layer"? Javashit glue logic is hard to learn. Can we possibly "abstract" this difficult process away?

    Starting Score:    1  point
    Moderation   +2  
       Insightful=2, Total=2
    Extra 'Insightful' Modifier   0  
    Karma-Bonus Modifier   +1  
    Total Score:   4  

  • (Score: 0) by Anonymous Coward on Tuesday May 22 2018, @06:57PM

    by Anonymous Coward on Tuesday May 22 2018, @06:57PM (#682760)

    We could run the node.js backend on a raspberry pi and put that in a data center? Would that be enough abstraction?

  • (Score: 2) by LoRdTAW on Tuesday May 22 2018, @07:18PM (2 children)

    by LoRdTAW (3755) on Tuesday May 22 2018, @07:18PM (#682767) Journal

    Say it with me Bro: CONTAINERS!

    • (Score: 1, Funny) by Anonymous Coward on Tuesday May 22 2018, @07:33PM (1 child)

      by Anonymous Coward on Tuesday May 22 2018, @07:33PM (#682770)

      I'm more of a regular bro, the whole capitalization thing is just so reminiscent of the historic patriarchy giving arbitrary importance to the selected few. Don't try and contain me bro!