From cf9bc921acd8f7f2dbaad8bead24ba8151b54ee3 Mon Sep 17 00:00:00 2001 From: Ganwtrs Date: Thu, 23 Jul 2026 10:30:05 -0700 Subject: [PATCH] docs: add Trail of Bits article to show Electron insecurity --- content/FAQ.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/FAQ.md b/content/FAQ.md index 01afec7..700cb58 100644 --- a/content/FAQ.md +++ b/content/FAQ.md @@ -171,7 +171,7 @@ Consult our [Flatpak article](/articles/flatpak). ### [Should I use Electron apps? Why don't they work well with hardened_malloc?](#electron) {: #electron} -For Electron apps like Signal, Slack, FreeTube, Element, VSCode, Discord, etc., consult this [discussion](https://github.com/secureblue/secureblue/issues/193#issuecomment-1953323680). +For Electron apps like Signal, Slack, FreeTube, Element, VSCode, Discord, etc., consult this [discussion](https://github.com/secureblue/secureblue/issues/193#issuecomment-1953323680). See also this [article](https://blog.trailofbits.com/2025/09/03/subverting-code-integrity-checks-to-locally-backdoor-signal-1password-slack-and-more/) for an example of a vulnerability caused by Electron. ### [Should I use Firejail?](#firejail) {: #firejail}