Infosec.Pub
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
RSS Bot@lemmy.bestiver.seMB to Lobste.rs@lemmy.bestiver.seEnglish · 6 months ago

Subverting code integrity checks to locally backdoor Signal, 1Password, Slack, and more

blog.trailofbits.com

external-link
message-square
0
link
fedilink
  • cross-posted to:
  • pulse_of_truth
10
external-link

Subverting code integrity checks to locally backdoor Signal, 1Password, Slack, and more

blog.trailofbits.com

RSS Bot@lemmy.bestiver.seMB to Lobste.rs@lemmy.bestiver.seEnglish · 6 months ago
message-square
0
link
fedilink
  • cross-posted to:
  • pulse_of_truth
A vulnerability in Electron applications allows attackers to bypass code integrity checks by tampering with V8 heap snapshot files, enabling local backdoors in applications like Signal, 1Password, and Slack.

Comments

alert-triangle
You must log in or # to comment.

Lobste.rs@lemmy.bestiver.se

lobsters@lemmy.bestiver.se

Subscribe from Remote Instance

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !lobsters@lemmy.bestiver.se
lock
Community locked: only moderators can create posts. You can still comment on posts.

RSS Feed of lobste.rs

Source of the RSS Bot

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 23 users / day
  • 116 users / week
  • 424 users / month
  • 1.28K users / 6 months
  • 6 local subscribers
  • 337 subscribers
  • 10.2K Posts
  • 507 Comments
  • Modlog
  • mods:
  • patrick@lemmy.bestiver.se
  • RSS Bot@lemmy.bestiver.se
  • BE: 0.19.13
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org