Pulse of Truth

1653 readers

16 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

founded 2 years ago

MODERATORS

krogoth

Subverting code integrity checks to locally backdoor Signal, 1Password, Slack, and more (blog.trailofbits.com)

submitted 3 weeks ago by lemmydev2 to c/pulse_of_truth

2 comments fedilink hide all child comments

A vulnerability in Electron applications allows attackers to bypass code integrity checks by tampering with V8 heap snapshot files, enabling local backdoors in applications like Signal, 1Password, and Slack.

you are viewing a single comment's thread
view the rest of the comments

[–] empireOfLove2@lemmy.dbzer0.com 12 points 3 weeks ago

You mean to tell me wrapping every single app in a glorified web browser container might introduce vulnerabilities you can't control in the container????