‹ BackHN Continuity

Thread

How one Twitch chat message became code execution on a streamer’s PC

67 points · 30 comments · tau255

  1. simoncion · · focus · HN ↗
    ...and people keep telling me that using a sprawling system that -by design- ingests attacker-supplied executable code and executes it is a much more sane way to build GUIs than to use a system that -well- isn't and doesn't... [0]

    [0] If you're thinking about retorting with something like "Noone will download native programs, that's why 'everything' is in a web browser!", remember that this is code execution triggered in OBS Studio. [1]

    [1] &lt;<a href="https:&#x2F;&#x2F;obsproject.com" rel="nofollow">https:&#x2F;&#x2F;obsproject.com&gt;

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.