News for hackers. Stuff that matters.

A comment on Electron is flash for the desktop (2016). Parent comment

Re:Electron is flash for the desktop (2016) by BatFastard on Tuesday April 11, 2017 @05:44PM (#14092769)
Why not? Is it not using a VM for desktop app?
[ Parent | on HN ]
Re:Electron is flash for the desktop (2016) by zwetan on Wednesday April 12, 2017 @12:40AM (#14094804)
it is not the same security context between web/browser apps and desktop apps wether there is a VM involved or not.

A browser can load remote payload (not under user control) that can then exploit browsers flaw, Flash AVM2 flaw, etc.

On the desktop the user run a local exe/app which has de facto "full system access".

A bit surprised you don't know that, it's kind of basic ...

[ Parent | on HN ]