There is lots of discussion about Electron / webp and - as someone who would never ever use electron for anything remotely approaching a security sensitive context - I do think it misses the mark.
Electron is bad because it shares an attack surface with the most attackable surface, but then extends it with all the functionality that was deliberately removed / never implemented because security.
(While giving developers very few tools to actually lock down that context in a meaningful way)
Sarah Jamie Lewis /
npub14m…vp58n
2023-09-28 17:07:13
Author Public Key
npub14mfj9wu5ujvu6rxj8w62dvkvqj7myqc6kz0upz3kuw3wx4dz9vgstvp58nPublished at
2023-09-28 17:07:13Event JSON
{
"id": "2a79b4449e2692a020f672fac34f181758b9267f15bfad409606c39df53bc7b2",
"pubkey": "aed322bb94e499cd0cd23bb4a6b2cc04bdb2031ab09fc08a36e3a2e355a22b11",
"created_at": 1695920833,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.social/users/sarahjamielewis/statuses/111143867756307095",
"activitypub"
]
],
"content": "There is lots of discussion about Electron / webp and - as someone who would never ever use electron for anything remotely approaching a security sensitive context - I do think it misses the mark.\n\nElectron is bad because it shares an attack surface with the most attackable surface, but then extends it with all the functionality that was deliberately removed / never implemented because security.\n\n(While giving developers very few tools to actually lock down that context in a meaningful way)",
"sig": "0b6a089e5c3031d3bff29efe374dee761040ab773524ab2e979bbd427cf7f5a8c9bee7697a36e3a1f4a741db29f17f6483a6d3888d3910fdc777e1f9c381fc58"
}