4 ms·
We Hacked Multi-Billion Dollar Companies Using a Fake VSCode Extension
- internetter 2y agoThis... doesn't feel responsible. This is "we uploaded malware to the app store and people installed it"
- signa11 2y ago> This... doesn't feel responsible. there are 3 parties involved here: 1. the developers who wrote the p.o.c 2. m$ which provides the 'ecosystem', and 3. the end user _i_ would put #2 way above #1 in the lack-of-responsibility department. for example, see: https://github.com/microsoft/vscode/issues/52116 https://github.com/microsoft/vscode/issues/52116 for some more information, it is definitely not an unknown attack vector.