4 ms·

And then a shady company offers to buy the owner's website...

• tshaddox 4y ago
  That’s a real problem, of course, but it seems fairly equivalent to any native app you install that can update itself or otherwise make a network request to obtain instructions.
  • gildas 4y ago
    I agree with you. On the other hand, in the case of a native application, we can hope that the antivirus removes it. I hope that Microsoft has planned to update Defender accordingly.
    • int_19h 4y ago
      JavaScript malware has been a thing for a while now, and antiviruses have been targeting it accordingly.
      • gildas 4y ago
        It's not necessarily a JavaScript malware. A pure HTML page with a <form> tag could suffice to steal credentials.
    • postalrat 4y ago
      Unlike the native app you probably won't have to worry about web page encrypted your files and asking a ransom.
      • bentcorner 4y ago
        For now
  • sneak 4y ago
    Native apps that autoselfupdate have RCE vulnerabilities by definition and should be considered remote access malware already, before the developer release keys are compromised. I am the reason Signal desktop now has a preference to opt out of autoupdate.
    • hulitu 4y ago
      "It won't happen to me."