News for hackers. Stuff that matters.

A comment on Age: A simple, modern and secure file encryption tool. Parent comment

Re:Age: A simple, modern and secure file encryption tool by dependenttypes on Saturday December 28, 2019 @02:07PM (#21900949)
If only it was $2 of RAM...

> in exchange for security

Electron is not famous for its security. See for example https://www.trustwave.com/en-us/resources/blogs/spiderlabs-b... and https://securityboulevard.com/2018/06/june-vulnerability-of-...

[ Parent | on HN ]
Re:Age: A simple, modern and secure file encryption tool by AgentME on Saturday December 28, 2019 @06:26PM (#21902560)
Those issues are only relevant to applications that display arbitrary HTML and already have XSS issues. Avoiding XSS is doable; with most web frameworks you're protected from XSS by default and have to specifically turn off the safeties to get XSS.
[ Parent | on HN ]
Re:Age: A simple, modern and secure file encryption tool by dependenttypes on Saturday December 28, 2019 @08:47PM (#21903270)
> Those issues are only relevant to applications that display arbitrary HTML and already have XSS issues

Such as signal! https://ivan.barreraoro.com.ar/signal-desktop-html-tag-injec...

[ Parent | on HN ]