edit: I completely agree about "electron applications". Those are not native applications on linux, those are badly made backdoors using browser runtimes. I do not run them and I strongly recommend to my family, friends, and peers not to run them.
edit: I completely agree about "electron applications". Those are not native applications on linux, those are badly made backdoors using browser runtimes. I do not run them and I strongly recommend to my family, friends, and peers not to run them.
Microsoft has VSCode, Skype and Teams on linux, Zoom has a native linux client.
With modern electron apps, often even being able to be updated remotely, you have to start treating more and more software as hostile as well.
That said, even if you’d only have trustful software, you should still sandbox it, as if there’d be an RCE in a chat client you wouldn’t want the attacker to be able to elevate itself to root.
[0] https://www.electronjs.org/blog/chromium-rce-vulnerability