Electron security flaws patched and disclosed

[Jan]

Serious security flaws discovered in software behind Microsoft Teams and Discord

A group of security researchers have uncovered a range of vulnerabilities in the Electron framework used by popular desktop apps like Discord and Microsoft Teams.

Motherboard reports the team detailed their findings at the Black Hat cybersecurity conference in Las Vegas on Thursday, explaining how they could have taken complete control of victims' systems simply by having them click on a link within the apps.

 

[HartsockZA]

Cool so the flaw that could end up screwing you is only up to the user for clicking on a malicious link on via Discord or Teams. So people a remind you are stupid if you click on something that looks sus.

 

[r00igev@@r]

Teams and Discord are bloat. Big fat ugly overweight programs that need to go on a diet.

 

[Mystic_ZA]

YouTube Music doesn't use Electron to the best of my knowledge.

They're purely web and progressive web app (PWA) based on desktop.

 

[Mystic_ZA]

Teams and Discord are bloat. Big fat ugly overweight programs that need to go on a diet.

Unfortunately the underlying Chromium based Electron engine is upwards of 100MB these days.

 

[r00igev@@r]

Unfortunately the underlying Chromium based Electron engine is upwards of 100MB these days.

They chew gigs in memory.