no comments (yet)

sorted by: hot top controversial new old
there doesn't seem to be anything here
1 comment in c/technology@midwest.social view that post
[–] 2 points 2 weeks ago

The vulnerability, tracked as CVE-2026-30612, affects Windows and macOS updaters that contacted the app's abandoned domain (popcorntimeupd.xyz) over unencrypted HTTP and accepted executables without verifying digital signatures.

We all rightfully bitch about the vibe coded apps, but the bar was about yey high all along.

  • source