News for hackers. Stuff that matters.

A comment on Basic Electron Framework Exploitation. Parent comment

Re:Basic Electron Framework Exploitation by cjbprime on Wednesday August 07, 2019 @02:24PM (#20637412)
I think you need OS codesigning integration for this threat model. Otherwise whatever special app runtime check code you add just gets removed by the malicious overwrite of your app code.
[ Parent | on HN ]
Re:Basic Electron Framework Exploitation by some_furry on Wednesday August 07, 2019 @02:56PM (#20637722)
I'm just doing this for secure updates, so that malware doesn't get delivered through the update mechanism. For precedent, see https://core.trac.wordpress.org/ticket/39309

It isn't meant to mitigate a compromised endpoint.

[ Parent | on HN ]