this started when i was looking into cursor, an ai text editor. also, i use lulu by objective-see on my laptop, so when i downloaded the cursor installer, i got this pop-up:
now, what the hell is todesktop? i thought i was downloading cursor? well, looking at their website, they seem to be an electron app bundler service alongside providing a SDK for electron apps. so it appears the installer i downloaded is actually managed by todesktop, not cursor.
this made me curious and i made an account on todesktop to look into it, and when i clicked the github login button, i saw my calling: firebase
Reminds me of the importance of having Firewall section on PG. Also it is the same author that found Arc browser RCE. Electron apps are terrible.