News for hackers. Stuff that matters.

A comment on Electron is flash for the desktop (2016). Parent comment

Re:Electron is flash for the desktop (2016) by zwetan on Tuesday April 11, 2017 @01:49PM (#14090581)
well... actually "flash for desktop" best known as Adobe AIR is a pretty good alternative to Electron.
[ Parent | on HN ]
Re:Electron is flash for the desktop (2016) by BatFastard on Tuesday April 11, 2017 @04:27PM (#14092130)
And is Electron more secure? I guess it doesn't have hackers all around the world trying to find vulnerabilities.

Is that good or bad?

[ Parent | on HN ]
Re:Electron is flash for the desktop (2016) by zwetan on Tuesday April 11, 2017 @04:58PM (#14092378)
that does not apply to desktop app
[ Parent | on HN ]
Re:Electron is flash for the desktop (2016) by BatFastard on Tuesday April 11, 2017 @05:44PM (#14092769)
Why not? Is it not using a VM for desktop app?
[ Parent | on HN ]
Re:Electron is flash for the desktop (2016) by zwetan on Wednesday April 12, 2017 @12:40AM (#14094804)
it is not the same security context between web/browser apps and desktop apps wether there is a VM involved or not.

A browser can load remote payload (not under user control) that can then exploit browsers flaw, Flash AVM2 flaw, etc.

On the desktop the user run a local exe/app which has de facto "full system access".

A bit surprised you don't know that, it's kind of basic ...

[ Parent | on HN ]