How to gain code execution on hundreds of millions of people and popular apps(kibty.town)
1062 points by xyzeva | 268 comments
A security researcher's blog post describing how a Firebase misconfiguration in ToDesktop, an Electron app bundler used by Cursor and others, allowed code execution on millions of users.