Interesting post about VS Code and Extensions

I came across this article this morning which I thought was interesting enough to share. I know VS Code is popular amongst many E14 members. Summing it up, it would seem that the marketplace for extensions in VS Code is wide open to abuse as there is no sandboxing within the IDE. It did get me wondering if Eclipse has the same issues.

Top Replies

cstanton over 1 year ago +2

Andrew J said: I came across this article this morning which I thought was interesting enough to share Thanks for sharing, that's utterly frightening. Here, have one in return: https://www.theregister…
Fred27 over 1 year ago in reply to embeddedguy +1

I know some people love to hate Microsoft - but where's the profit in VS Code? It's free. It's open source. Lots of companies have chosen to extend it (e.g. Nordic) or base their tooling around it (e…
cstanton over 1 year ago in reply to Fred27 +1

Fred27 said: I know some people love to hate Microsoft - but where's the profit in VS Code? Some things are passive. Once you're in "the ecosystem" the profit becomes two things: - Telemetry -…

Parents

cstanton over 1 year ago

Andrew J said:
I came across this article this morning which I thought was interesting enough to share

Thanks for sharing, that's utterly frightening.

Here, have one in return:

https://www.theregister.com/2024/06/25/polyfillio_china_crisis/
Cancel
Vote Up +2 Vote Down

Sign in to reply

Cancel
Andrew J over 1 year ago in reply to cstanton

Blimey. I'm so glad I'm retired and don't have to worry about this at a professional/customer level anymore. I think my default position would be to not download plugins, extensions, whatever if I don't really need the functionality. It would be nice if licenses for products from the like of JetBrains weren't so expensive for single users.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Cancel
md_steve over 1 year ago in reply to Andrew J

Retired or not, we're all disrupted when bad software is deployed across an industry. Have you tried to buy a car this month? I didn't get hacked, and my dealer didn't get hacked, but we all take a hit when poorly written software controls a whole channel.

Now, about that hospital's software...
Cancel
Vote Up +1 Vote Down

Sign in to reply

Cancel
Andrew J over 1 year ago in reply to md_steve

Yes, but it's not my responsibility anymore to ensure it doesn't happen or fix it when it does. I can't live my life worrying about what isn't under my control!
Cancel
Vote Up 0 Vote Down

Sign in to reply

Cancel
colporteur over 1 year ago in reply to Andrew J

I retired in 2018 from an IT Security position. I am both relieved and terrified at vulnerabilities. Working in the industry I felt secure in gaining knowledge but it was a lot of work to keep up to date. Leaving the industry I don't have to maintain the knowledge but without it I'm never sure if things are secure.

I just moved to VSC to take advantage of git. One step ahead, two steps back.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Cancel

Reply

colporteur over 1 year ago in reply to Andrew J

I retired in 2018 from an IT Security position. I am both relieved and terrified at vulnerabilities. Working in the industry I felt secure in gaining knowledge but it was a lot of work to keep up to date. Leaving the industry I don't have to maintain the knowledge but without it I'm never sure if things are secure.

I just moved to VSC to take advantage of git. One step ahead, two steps back.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Cancel

Children

No Data