3 ms·

Wait, what did Bitwarden do?

• sneak 5y ago
  https://github.com/bitwarden/desktop/issues/552 https://github.com/bitwarden/desktop/issues/552 Downloads and execs unexamined code released by the devs, potentially backdooring your whole machine solarwinds-style. It also divulges to MSFT (GitHub admins) all the IPs of Bitwarden users (even ones using a selfhosted API).
  • mishafb 5y ago
    Isn't this true for any app that has updates though?
    • sneak 5y ago
      No-interaction autoupdates, yes. This is how the solarwinds hack happened.