Re:Zero-click, wormable, cross-platform remote code executio...
by oskarsv on Monday December 07, 2020 @12:54PM
(#25334778)
that electronSafeIpc API is actually not that interesting and a completely standard way to do things for ElectronJS apps.
No, I do agree - from my perspective C/C++ class bugs are more difficult. Maybe they see this as magic as well.
Still, it was painstaking work and in either case CountryX will easily surpass those difficulties.
I have analyzed foreign code bases of similar dimensions in the past myself and found critical bugs. The size doesn't say much, it comes down to identifying the "interesting" bits (like the electronSafeRpc in this case), which can be hard and tedious, but greatly reduces the code you have to look at in detail. My assertion is that if your name is e.g. China then you will not be turned off by that.