Postmortem: Zettlr’s first Security Incident
Hendrik Erz · 2021
Today is the day: I publish the first post-mortem that I had to write up. Having developed my app Zettlr for the past four years, I knew I'm not safe from security issues, and last Thursday, it was time: I received a mail containing a security related disclosure concerning a huge hole in the safety of Zettlr. I have posted this Postmortem also on the Zettlr blog, but I wanted to share it with you here as well. The reason? Don't be such an idiot as I was.