signal desktop has built-in RCE for the signal devs and also takes for fucking ever to start up because apparently it loads all message history evar into ram or something? why does it think it needs to do that?

@sneak wait what, what about that RCE? Got something for me to read up on?

@doenietzomoeilijk it self-modifies when the signal developers publish an update. no interaction required. anyone with the signal developers' creds can execute code on your machine.

Sign in to participate in the conversation

The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!