Hacker News new | past | comments | ask | show | jobs | submit login

How do you deal with zero day vulnerabilities? To me the biggest concern using browser-as-a-desktop solution is that there will be quite a lag between when Chrome patches zero days vs when it gets released.

ex) nw.js, electron.




> To me the biggest concern using browser-as-a-desktop solution

Then this project sounds perfect for you because it's not a browser, it's Qt5 but called via APIs that JS developers are used to.


Isn't it rendering html5/javascript like a browser would? it would be great if somebody could take time to reply and explain things in a calm logical manner without reaching for downvotes


I think nobody wants to tell you since it’s something that is easily found on the linked site.

To answer your question, there is no more HTML involved in this than in a React Native app. The result looks like HTML, but it’s really used to compose native OS widgets.


my bad i saw the github but couldn't find any code examples other than someone smiling


What sort of vulnerabilities are you worried about? You're running trusted code, connecting to a trusted service via https. Not browsing arbitrary websites. I doubt many vulnerabilities would affect this.


> trusted service via https

you think that would stop a zero day vulnerability? if you have browser that won't be updated for a long time and its connected to the internet, it is a huge attack surface.

Unless you were running local static file without ever talking to the internet.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: