MacDevOpsYVR 2024 - Electron Security

At MacDevOpsYVR 2024, I had the amazing opportunity to talk about Electron security and show off a new open source utility I’ve been working on called Lectricus.

• YouTube - MDOYVR24 - Mykola Grymalyuk - Electron Security: Making your Mac a worse place?

Additional resources from my talk below:

• Lectricus
  • Open-source Electron security utility.
• Tsunek0h’s CVE-2023-32546:
  • What kicked off this idea for Electron querying!
  • Chatwork Desktop Application.
  • Part of their SIP bypass talk at CODE BLUE 2023.
• Wojciech Reguła’s electroniz3r
  • Didn’t know it existed when I started Lectricus…
  • But made me go further with Lectricus!
• Electron:
  • Fuses
  • Statement regarding “runAsNode” CVEs
• Slides: Electron Security: Making your Mac a worse place? (PDF)
  • If you’d prefer, the rest of this blog is a gallery you can scroll through below.

---