What I find particularly concerning is that the were able to "hide javascript commands that link the victim's phone to a new device" in the payload of a qr-code. I can't see any valid use for javascript in the group joining process, I would expect the code to just be a signal URI with the relevant group ID, so is there sone external javascript interface being exposed?
- Posts
- 1
- Comments
- 481
- Joined
- 3 yr. ago
- Posts
- 1
- Comments
- 481
- Joined
- 3 yr. ago
- JumpDeleted
Permanently Deleted
- JumpRemoved Locked
A New Plan To Create a World Without Elon Musks.
I prefer wooden pegs with a stainless spring, but plastic has to be pretty much the worst choice.