Darius Houle on The Trail of Bits Bloghttps://miscreants.github.io/blog.trailofbits.com/authors/darius-houle/Recent content in Darius Houle on The Trail of Bits BlogHugoen-usWed, 03 Sep 2025 00:00:00 -0400Subverting code integrity checks to locally backdoor Signal, 1Password, Slack, and morehttps://miscreants.github.io/blog.trailofbits.com/2025/09/03/subverting-code-integrity-checks-to-locally-backdoor-signal-1password-slack-and-more/Thu, 04 Sep 2025 00:00:00 -0400https://miscreants.github.io/blog.trailofbits.com/2025/09/03/subverting-code-integrity-checks-to-locally-backdoor-signal-1password-slack-and-more/A vulnerability in Electron applications allows attackers to bypass code integrity checks by tampering with V8 heap snapshot files, enabling local backdoors in applications like Signal, 1Password, and Slack.