n
neemlama

Neem J. Lama

@neemlama

Shipped Electron App Build and Hardening Audit

Népal
Anglais, Népalais
Certaines informations sont présentées en anglais.
À propos de moi
Independent reviewer of Electron desktop apps. I audit the build your customers actually download, because most build-time exposure only exists after packaging. I found the Electron hardening fuses left unconfigured in Gitify (5.4k stars); the maintainer credited the analysis and adopted the fix. Every finding carries a confidence grade, secret values are masked, and the report states plainly what I could not check. Static analysis only - nothing is executed.... Plus d’infos

Compétences

n
neemlama
Neem J. Lama
hors ligne • 
Temps de réponse moyen de 1 heure

Voir mes services

révision du code
I will audit your app for leaked API keys and missing hardening
De75 $US / projetPlus de détails

Expérience professionnelle

Self-Employed_/ Freelancer

Independent Security Auditor

Self-Employed / Freelancer • Freelance

Feb 2025 - Present • 1 yr 8 mos

Independent security reviewer of Electron desktop applications. I audit shipped builds (.exe, .dmg, .asar), not source repositories. Public audit of Gitify v7.9.0: identified Electron hardening fuses left at framework defaults, 106 source maps shipped in a production build, and 44 development bundles. Reported publicly; maintainer credited the analysis. No runtime testing, no exploitation, secret values masked in every report.