Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
floss.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
For people who care about, support, and build Free, Libre, and Open Source Software (FLOSS).

Administered by:

Server stats:

691
active users

floss.social: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

Public *
nixCraft 🐧

Another shity Microsoft product doing nasty things. Every YouTube tutorial or Twitch stream starts with VS Code. This is another example of how Microsoft push their products with bad security practices and promote their tech like Copilot, Github, C#, TypeScript, etc.

Read: VSCode’s SSH Agent Is Bananas fly.io/blog/vscode-ssh-wtf/ ( or use the archive.ph/BansH )

If possible avoid Microsoft spyware and all of their shity services that now push AI like crazy person. It is a massive mess.

The SSH agent runs over port-forwarded SSH. It establishes a WebSockets connection back to your running VSCode front-end. The underlying protocol on that connection can: * Wander around the filesystem * Edit arbitrary files * Launch its own shell PTY processes * Persist itself In security-world, there’s a name for tools that work this way. I won’t say it out loud, because that’s not fair to VSCode, but let’s just say the name is murid in nature.
Gabriel

@nixCraft I understand the dislike for Copilot et al., however, I think that typescript is great

Feb 08, 2025, 05:52 AM·Public
0boosts·2favorites
Explore
About