Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

And yet, this entire class of abuse is only possible because Microsoft refuse to implement any kind of permission management or sandboxing for extensions.

https://github.com/microsoft/vscode/issues/52116



Second this.

As a vscode extension author, I am scared by the power I have. I am not at all surprised by what happened in this story.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: