Hacker News new | ask | show | jobs
by 0xcoffee 2170 days ago
It feels like there are good security measures mixed with 'bad' ones in here.

It may be useful to focus more on the why, then the what.

I see you are familiar with frida and know a thing about reverse engineering, so I assume you know that just like most local protectors, someone will just eventually write a wrapper that automatically bypasses all the 'security' measures.

If we take electron as an example, why do I care that Tauri implements all these things, while electron doesn't. How does it make it more secure? Am I supposed to be worried someone is sitting in between my GUI and backend intercepting messages? Is this a common attack vector for electron? I'm really have a lot of questions why to put effort into developing all these things.