Terrifying bug in WhatsApp allows hackers to steal files. So get patching all nine of you using it on the desktop A vulnerability in WhatsApp could be exploited to remotely access a victim's files on their computer – if they use the desktop client paired with the iPhone app. A patch has been issued and should be installed. Bug-hunter Gal Weizman, from security shop PerimeterX, discovered and reported CVE-2019-18426, a cross-site scripting …
I didn't even know there was a desktop version of Whatsapp. But you can just use the online web.whatsapp.com in whatever browser you want and get a big screen desktop version of Whatapp, without the out of date Chromium build. That allows you to view, reply to and send messages. What does the desktop version offer extra on top of that?
"JavaScript code stashed in a maliciously crafted banner can bypass protection mechanisms and access the local file system of the target"
JavaScript is a plague. It breaks URL links because companies want their precious pages to be just exactly so and display things through JS rather than a proper URL in the first place. It brings malware and hijacks the platform. It should be banned.
Thank God for NoScript.
Thank you very much Pascal. The intelligent should get together and shout this aloud. The situation's got so silly that the UK cyber security authority has turned its entire web site into a js app. You can't even see the landing page unless scripting is enabled. And they're supposed to be the experts in infosec.
I use both, Android and MacOS desktop. I use the desktop version since it's faster and easier to type using a full keyboard and if I want to send some stuff it's also easier. Obviously if I want to send a picture I take it on the phone and send it on the phone but other stuff It's easier to use the desktop. Horses for courses.
The desktop version won't work unless my phone is on and running WhatsApp and is on me or close to the laptop.
To be fair, my standard editor is sublime text. I use vscode with platformio for embedded stuff, when I last did any of that anyway, and I use it with Quasar framework for Vue JS stuff. I use sublime as my everyday editor and for Django stuff.
Funny you should mention VS code memory usage, because when I tried to use it with Django, its intellisense stuff just got in an endless loop digging through the python libraries and used all my 16 gigs of ram, then started swapping out all over my SSD.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
