6 ms·

So it lasted 3 days? https://g3rv4.com/2018/08/betterslack https://g3rv4.com/2018/08/betterslack From that post: > I may build an Electron app that patches t

So it lasted 3 days? https://g3rv4.com/2018/08/betterslack https://g3rv4.com/2018/08/betterslack From that post: > I may build an Electron app that patches the Electron app… so far, that’s what makes the most sense to me. But we’ll see. Even if this was against the ToS, could it be stopped? I didn't know one Electron app could target the other.

neonate 8y ago
Maybe the "legal team" saw it here: https://news.ycombinator.com/item?id=17850932 https://news.ycombinator.com/item?id=17850932.
- g3rv4 8y ago
  probably... I certainly didn't want to hide anything
  - neonate 8y ago
    Now they can have their comeuppance with this one.
g3rv4 8y ago
no, it can't be stopped technically. But I know I don't want to mess with them.
derefr 8y ago
> I didn't know one Electron app could target the other. An Electron app consists of two parts: HTML5 (which can run Javascript, but within a browser-like sandbox), and native Javascript code, running under Node.js with no sandbox whatsoever. The native half of an Electron app can do anything to your filesystem (including the parts that contain other applications) that any other native app can do.
- rmrfrmrf 8y ago
  I'm not sure how easy that would be since you're dealing with ASAR (just a binary encoding but definitely not as easy as modifying plain JS files) and code signing.
  - arvidkahl 8y ago
    There is a node-js package to pack and unpack asar files. You can modify any asar archive by unpacking, copying/editing and re-packing. The signature would obviously change, but most electron apps really don't check for that (yet).
kodablah 8y ago
> I didn't know one Electron app could target the other. A year ago or so, I was able to start desktop Slack with a param to open the dev tools port open and use something like puppeteer to control it (at the least, I opened dev tools inside of Slack's Electron app). Not sure if that is still the case.

neonate 8y ago

Maybe the "legal team" saw it here: https://news.ycombinator.com/item?id=17850932 https://news.ycombinator.com/item?id=17850932.

g3rv4 8y ago
probably... I certainly didn't want to hide anything
- neonate 8y ago
  Now they can have their comeuppance with this one.

g3rv4 8y ago

no, it can't be stopped technically. But I know I don't want to mess with them.

derefr 8y ago

> I didn't know one Electron app could target the other. An Electron app consists of two parts: HTML5 (which can run Javascript, but within a browser-like sandbox), and native Javascript code, running under Node.js with no sandbox whatsoever. The native half of an Electron app can do anything to your filesystem (including the parts that contain other applications) that any other native app can do.

rmrfrmrf 8y ago
I'm not sure how easy that would be since you're dealing with ASAR (just a binary encoding but definitely not as easy as modifying plain JS files) and code signing.
- arvidkahl 8y ago
  There is a node-js package to pack and unpack asar files. You can modify any asar archive by unpacking, copying/editing and re-packing. The signature would obviously change, but most electron apps really don't check for that (yet).

kodablah 8y ago

> I didn't know one Electron app could target the other. A year ago or so, I was able to start desktop Slack with a param to open the dev tools port open and use something like puppeteer to control it (at the least, I opened dev tools inside of Slack's Electron app). Not sure if that is still the case.