Are such exploits possible in electron, or is it sandboxed to prevent such error... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

blackoil on Oct 19, 2020 | parent | context | favorite | on: Discord Desktop App RCE

Are such exploits possible in electron, or is it sandboxed to prevent such errors?

judge2020 on Oct 19, 2020 | [–]

The article goes into that. The RCE video at the bottom shows the entire attack chain from embed to opening calc.exe.

zaroth on Oct 19, 2020 | [–]

It is. If you turn it on. And they didn’t. Amateur hour.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact