4 ms·
Speaking of "disheartening": your fellow devs who wrote the Pylance extension decided to mount a ReDoS attack against anyone who opens it in a debugger. I merel
by Hackbraten 2y ago
Speaking of "disheartening": your fellow devs who wrote the Pylance extension decided to mount a ReDoS attack against anyone who opens it in a debugger. I merely tried to investigate an issue that I had. [0] [1]
Being on the receiving end of a deliberate ReDOS attack feels more than disheartening. This is not shedding a good light on the VS Code development team as a whole. This is a despicable act.
[0]: https://darmstadt.social/system/media_attachments/files/112/866/046/738/817/159/original/b18b18cb04e3e111.png https://darmstadt.social/system/media_attachments/files/112/...
[1]: https://darmstadt.social/system/media_attachments/files/112/866/064/047/460/805/original/dd966c9cfa627420.png https://darmstadt.social/system/media_attachments/files/112/...
- Varriount 2y agoI get what a regular expression like that does, but what leads to it being executed?
- Hackbraten 2y agoNo idea. All I know is whenever I try to execute the module in e.g. VS Code's debugger, it somehow triggers the attack and enters a de-facto-endless 100%-CPU-load loop.
- DonHopkins 2y agoNow you have two problems! https://blog.codinghorror.com/regular-expressions-now-you-have-two-problems/ https://blog.codinghorror.com/regular-expressions-now-you-ha...