3 ms·
> Who figured it would be a good idea to allow received chats to be interpreted as code?! They didn't allow it on purpose. They have a "RunScript" command that
by choward 10y ago
> Who figured it would be a good idea to allow received chats to be interpreted as code?!
They didn't allow it on purpose. They have a "RunScript" command that allows you to execute code on your machine. However, the attacker tricks the user into overwriting a function that is called when a message is received to run the "RunScript" function instead.
> That's a pretty big security fail if you ask me.
That's the point of the article.