Skip to content

Conversation

@LocalIdentity
Copy link
Contributor

Adds support for a hidden CMD window so we can use it to replace the CMD window that flashes when we update the runtime files

Adds support for a hidden CMD window so we can use it to replace the CMD window that flashes when we update the runtime files
Copy link
Member

@Wires77 Wires77 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Concerns about this:

  • This introduces a hook in the Lua code that makes it very easy for a bad actor to distribute an unofficial PoB release and silently launch whatever malware they want. This was technically always the case with os.execute and distributing unofficial code, but this makes it easier
  • If something goes wrong with the update process, like if a file to be updated is locked for some reason, there is no way to know what is going on. Previously we've seen bug reports where it hangs and we can tell them to close other PoB instances/other software, but this doesn't show that anymore. (I know we've added a workaround for the main cause of that issue, but still)

@LocalIdentity LocalIdentity deleted the add_silent-cmd branch October 25, 2025 22:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants