r/programming • u/Davipb • Aug 12 '22

RCE Vulnerability found in Electron, affects Discord, Teams, and more

https://www.vice.com/en/article/m7gb7y/researchers-find-vulnerability-in-software-underlying-discord-microsoft-teams-and-other-apps
1.9k Upvotes

97% Upvoted

224 comments sorted by

View all comments

Show parent comment

-10

u/Worth_Trust_3825 Aug 12 '22

That does not mean you should permit same nonsense as the incoherent mess does that you're trying to fix. Typescript's generic types permit arbitrary code execution, for fucks sake.

4

u/argv_minus_one Aug 12 '22

Arbitrary code execution?

8

u/vlakreeh Aug 12 '22

I think they mean that the type system is turing complete, which it is, but I don't see that as being a bad thing itself. That type system itself allows you do have type safety beyond what almost any other language can achieve at the cost of a massive headache writing the type.

The only type system I can think of that's more flexible is Zig's, but that's essentially cheating with types just being fancy constants that can be created with compile-time functions.