3 ms·
Plugins. The security nightmare of desktop applications and the main reason Google store / Apple store is banishing developers accounts left and right. Like Sc
by unnouinceput 7y ago
Plugins. The security nightmare of desktop applications and the main reason Google store / Apple store is banishing developers accounts left and right.
Like Schneier always said "you can always create an unbreakable security for you but smarter ones will find holes in it". I'm curious how this one will hold on long term, let's say an year from now.
- bastawhiz 7y agoI think the nice thing about their approach is that it's built on top of the same sandboxing that underpins the very fundamental primitives of the web. If this approach is broken, the same-origin policy of the web is broken. Compared to "native" approaches, where every application needs to implement their own solution, this seems far more durable (and easily fixed).
- unnouinceput 7y agoiframe is already broken. If I get you to hold my code inside an iframe and what I put there is a malware ActiveX your users going to blame you for their stolen accounts / btc mining worms. Windows is still a good target for malware creators despite the rise of mobile consumers.