3 ms·
That's because PCs aren't phones and the software run on PCs does not attack the user. This is different from phones where the user is the product to be sold an
by superkuh 6y ago
That's because PCs aren't phones and the software run on PCs does not attack the user. This is different from phones where the user is the product to be sold and almost all software is antagonistic but it doesn't apply to the linux desktop, yet.
edit: I completely agree about "electron applications". Those are not native applications on linux, those are badly made backdoors using browser runtimes. I do not run them and I strongly recommend to my family, friends, and peers not to run them.
- kuschku 6y ago> but it doesn't apply to the linux desktop, yet. Microsoft has VSCode, Skype and Teams on linux, Zoom has a native linux client. With modern electron apps, often even being able to be updated remotely, you have to start treating more and more software as hostile as well. That said, even if you’d only have trustful software, you should still sandbox it, as if there’d be an RCE in a chat client you wouldn’t want the attacker to be able to elevate itself to root.
- Macha 6y agoIf you don't trust VSCode, then don't use it. Or use vscodium. But if Microsoft wanted to be evil through VS Code, they could already do enough damage by just sending your projects to them, I would imagine.
- hnaccount141 6y agoIt's not a question of trust, vulnerabilities can happen to anyone. Even if the devs at Microsoft were perfect (they aren't), all it takes is an rce in one of the libraries vscode depends on. (Like Chromium, which has happened before [0]) [0] https://www.electronjs.org/blog/chromium-rce-vulnerability https://www.electronjs.org/blog/chromium-rce-vulnerability