VS Code

819 readers

3 users here now

founded 1 year ago

MODERATORS

Ategon

Lodra

Malicious VSCode extensions with millions of installs discovered (www.bleepingcomputer.com)

submitted 6 months ago by [email protected] to c/vscode

5 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 4 points 6 months ago

As @Deebster points out, on Android & iOS apps need to ask for permission before accessing sensitive commands beyond the kernel. VisualStudio (as far as as I know) doesn't have a permissions layer. Also the article also mentions that scrutiny is lenient since VSCode is a Dev tool used by (on average) knowledgeable users.

100% agree with you, Microsoft is mostly cost cutting/shirking responsibility by not implementing tighter controls on external code on their tools.

permalink
fedilink
source
parent