3 ms·
My personal moment where Microsoft briefly showed me its true form: Microsoft's Python language server extension for VS Code (Pylance) has been crashing on lau
by Hackbraten 2y ago
My personal moment where Microsoft briefly showed me its true form:
Microsoft's Python language server extension for VS Code (Pylance) has been crashing on launch on one of my machines for twelve months or so.
One day, I got fed up with it and opened the extension in a JS debugger to investigate. Immediately after opening it, the extension fully deliberately DoSed [0] the CPU core with a full-on ReDoS [1] attack, leaving it spinning at 100% forever.
[0]: https://darmstadt.social/@claudi/112866065489514979 https://darmstadt.social/@claudi/112866065489514979
[1]: https://en.wikipedia.org/wiki/ReDoS https://en.wikipedia.org/wiki/ReDoS
- usui 2y agoYour first reaction is to attribute this specific situation to intentional malice?
- Hackbraten 2y agoHave you looked at the regular expression in the linked screenshot? How is it not intentional?
- fransje26 2y agoWell, it is Microsoft we are talking about, with quite a track record on the topic..