Microsoft Teams stores auth tokens as cleartext in Windows, Linux, Macs

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

Our great sponsors
  • WorkOS - The modern identity platform for B2B SaaS
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • SaaSHub - Software Alternatives and Reviews
  • electron-secure-defaults

    Starter kit and documentation for building security conscious Electron apps

    > Electron does not support encryption or protected file locations by default

    Jesus, this article is wrong on so many levels. Electron is fundamentally a way to build cross-platform apps with C, C++, and web technologies. It supports anything the operating system supports.

    I like 1Password's secure starter kit: https://github.com/1Password/electron-secure-defaults

  • chromium

    The official GitHub mirror of the Chromium source

    Chrome has an entry in their FAQ about why this type of attack is specifically excluded from its thread model: https://chromium.googlesource.com/chromium/src/+/master/docs...

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project