4 ms·
> but it doesn't apply to the linux desktop, yet. Microsoft has VSCode, Skype and Teams on linux, Zoom has a native linux client. With modern electron apps,
by kuschku 6y ago
> but it doesn't apply to the linux desktop, yet.
Microsoft has VSCode, Skype and Teams on linux, Zoom has a native linux client.
With modern electron apps, often even being able to be updated remotely, you have to start treating more and more software as hostile as well.
That said, even if you’d only have trustful software, you should still sandbox it, as if there’d be an RCE in a chat client you wouldn’t want the attacker to be able to elevate itself to root.
- Macha 6y agoIf you don't trust VSCode, then don't use it. Or use vscodium. But if Microsoft wanted to be evil through VS Code, they could already do enough damage by just sending your projects to them, I would imagine.
- hnaccount141 6y agoIt's not a question of trust, vulnerabilities can happen to anyone. Even if the devs at Microsoft were perfect (they aren't), all it takes is an rce in one of the libraries vscode depends on. (Like Chromium, which has happened before [0]) [0] https://www.electronjs.org/blog/chromium-rce-vulnerability https://www.electronjs.org/blog/chromium-rce-vulnerability