You are viewing a single thread.
View all comments View context
43 points
*

Last time I checked the version Electron used by Discord was severely out of date causing several issues that had been solved months ago upstream. That’s the fault of Discord, not Electron but there are several issues with Chromium that I have to deal with on every Electron app I use. Compose sequences are still partially broken. I reported it at Chromium but they responded with a video of them testing it on Windows (not with a VM), said they couldn’t reproduce the issue (with a Linux specific input method?!) and then marked it as unreproducible.

permalink
report
parent
reply
23 points

Wait, you’re telling me that Discord is probably still vulnerable to the Webp RCE vulnerability?

permalink
report
parent
reply
19 points

They use plain text and there biggest shareholder is the Tencent (the CCP let’s be real) are you surprised? It’s literally a data farm for China…

permalink
report
parent
reply
7 points

They probably manually added the patch.

permalink
report
parent
reply
7 points

They updated to a version that included a patch for that exploit, however it doesn’t matter in the grand scheme of things, because they’re still on 22.x, support for which has already been terminated

permalink
report
parent
reply
10 points

Problem is, for any somewhat big project (like discord) updating Electron without something breaking is a nightmarishly complex venture as Electron doesn’t seem to care about backwards compatibility.

permalink
report
parent
reply
12 points

The error is in picking Electron in the first place. One particular case that I’ve had with several Electron apps are zombie processes. You close the window, but you check the task manager and see 4-5 processes hanging in there, eating resources for no reason.

permalink
report
parent
reply
3 points
*

I agree that it’s silly to package your app as a website with a browser but what other options do you have? GTK is difficult to get working on Windows, wxwidgets requires installing libraries on every system and Qt is either paid or LGPL. The only real crossplatform options seem to be Flutter and some .NET frameworks.

permalink
report
parent
reply

Programmer Humor

!programmerhumor@lemmy.ml

Create post

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

  • Posts must be relevant to programming, programmers, or computer science.
  • No NSFW content.
  • Jokes must be in good taste. No hate speech, bigotry, etc.

Community stats

  • 6.9K

    Monthly active users

  • 1.5K

    Posts

  • 34K

    Comments