News for hackers. Stuff that matters.

A comment on Basic Electron Framework Exploitation. Parent comment

Re:Basic Electron Framework Exploitation by cjbprime on Wednesday August 07, 2019 @02:29PM (#20637452)
This (FS write access == game over) is usually true on Linux, but the Mac and Windows codesigning infrastructures exist to offer some protections and user warnings in this case, and they're what's being defeated by this attack.
[ Parent | on HN ]
Re:Basic Electron Framework Exploitation by kogir on Wednesday August 07, 2019 @04:06PM (#20638363)
With FS access you can just strip the signature entirely and it’ll run without any fuss. In this case it’s the machine that’s compromised, not the app.
[ Parent | on HN ]