News for hackers. Stuff that matters.

A comment on Remote zero-click JavaScript code execution on Signal desktop.

Re:Remote zero-click JavaScript code execution on Signal des... by jsnar on Friday May 11, 2018 @06:52PM (#17051290)
Signal desktop app is based on the insecure Electron runtime. See my report here: https://github.com/signalapp/Signal-Desktop/issues/1635
[ Parent | on HN ]
Re:Remote zero-click JavaScript code execution on Signal des... by Boulth on Saturday May 12, 2018 @07:00AM (#17053467)
I read the (now locked) thread, the way they handled the report leaves much to be desired.
[ Parent | on HN ]