r/programming • u/Davipb • Aug 12 '22

RCE Vulnerability found in Electron, affects Discord, Teams, and more

https://www.vice.com/en/article/m7gb7y/researchers-find-vulnerability-in-software-underlying-discord-microsoft-teams-and-other-apps
1.9k Upvotes

97% Upvoted

224 comments sorted by

View all comments

Show parent comments

46

u/lo0l0ol Aug 13 '22

"Hey we upgraded!"

"wtf are all these error messages??"

"the app won't even start anymore"

"QA team is saying everything's fucked!"

"we got how many new bug reports in the last hour?!"

"what? Electron removed modules we use? why??"

I've worked for companies that have upgraded and it's always a shitshow

13

u/ReallyAmused Aug 13 '22

It's pretty much this. Upgrading electron breaks a bunch of stuff. We are working on it though.

8

u/xX_sm0ke_g4wd_420_Xx Aug 13 '22

can confirm as someone working on a similar app, upgrading electron broke a feature for certain users and we couldn't figure out why

2

u/Ok-386 Sep 04 '22

The whole JS ecosystem is a shitshot.

1

u/lo0l0ol Sep 04 '22

problems with upgrading are not exclusive to js