triadacamping.blogg.se

1. Cryptocat comparison install#
2. Cryptocat comparison update#
3. Cryptocat comparison software#
4. Cryptocat comparison code#

The Electron framework forms the basis for GitHub's text editor Atom and Microsoft's Visual Studio Code. Although the attacker needs local access to a system for this - attacks from afar are therefore difficult - simple user rights are sufficient under Windows.

Cryptocat comparison software#

Programs based on the Electron framework can be Trojanized by local attackers and misused as attack platforms.Īt the BSides Las Vegas security conference, Pavel Tsakalidis of security firm Context disclosed a vulnerability in GitHub's Electron software development framework that can be used to backdoor Electron apps and inject them with malicious code. Skype, Slack, VS Code, Atom: Electron apps have a dangerous Achilles heel Also, according to the Free Software Directory (external) Electron is non-free software. Some therefore recommend not to run Electron applications directly, but exclusively isolated, e.g. If apps focus on “security” and boast about it - but use Electron at the same time, this clashes a bit. **Electron is therefore neither recommended for security reasons nor for reasons of data economy (data protection).

However, regular updates are elementary important to close security gaps.Īn impressive example can be found at debian (external). Unfortunately, some developers think differently when it comes to Electronapps.

Cryptocat comparison update#

However, no one acting responsibly would not update their browser for months, whether Chromium, Firefox or any other browser. Often there are weeks or months between the used and available electron versions. It is also more common with Electronapps that the developers keep their software up to date, but do not regularly update the Electronframework used. Actually, you could then use the regular web application of the app right away.ĭue to the complexity of browsers, the attack surface is correspondingly larger than with classic programs/apps. It virtually pretends a cleanly developed program for the respective operating system by actually bundling only the web application in Chrome.

Cryptocat comparison install#

That means, for each Electron App you install yourself a complete Chrome browser. So basically Electron apps are not really apps but a Chrome browser with only one tab, namely the app. Does anyone have some experience in this matter?Įlectron is more or less a complete Chrome browser with a built-in additional function (the app).

Cryptocat comparison code#

I use inject losely, as there are some apps that I can’t readily get access to the source code of Spotify and Slack serve as primary examples. Since both Chrome and Chromium use this screenreader, and Electron uses Chrome to function, I wonder if it then is possible to “inject” the ChromeVox screenreader in to my apps. It does, however, have an extension called ChromeVox to serve as a screenreader. This is because Chromium, my primary browser, doesn’t support using Orca by default. Injecting a Chromium Add-On in to ElectronĪs a blind user, I am having problems using Electron apps with the Orca screenreader for Linux. There are a lot of applications implemented with Electron: Atom, DeltaChat desktop, Discord desktop, Element desktop, Mattermost desktop, Signal desktop, Slack desktop, Threema desktop, Visual Studio, WhatsApp desktop etc.īelow is more on the criticism of the undisputedly very successful development platform.Įlectron is not accessible (“accessible”), which means, for example, that visually impaired people are disadvantaged. “Electron” is a development environment for applications, which are then ultimately embedded in an “own” browser.Īdvantage: Practical - An app as a browser, works virtually everywhere.ĭisadvantage: Potential for attack - overloaded, large memory requirements, not barrier-free.