4 ms·
Isn't the problem that VS Code has no permission model (restricting of them), so all extensions can do anything?
by e40 2y ago
Isn't the problem that VS Code has no permission model (restricting of them), so all extensions can do anything?
- tabony 2y agoWhile it is, the same issue exists in Sublime, Vim, Emacs, Gedit, pico/nano[1], IntelliJ, Android Studio, Eclipse, and every editor. [1] https://threatpost.com/researchers-show-how-popular-text-editors-can-be-attacked-via-third-party-plugins/130559/ https://threatpost.com/researchers-show-how-popular-text-edi... I think Xcode may be the exception but Xcode plugins also can’t do much.
- e40 2y agoI think Emacs and Vim will be lower probability targets than VS Code, though.