RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit

Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by easton on Tuesday December 21, 2021 @09:34AM (#29637682)

Apps installed from the Microsoft Store are no longer guaranteed safe, as Win32 apps can be added to the store now and installed via winget. There’s static analysis and they run the installer, but if it does something stupid after the install they can’t automatically detect it.

[ Parent | on HN ]

Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by withinrafael on Tuesday December 21, 2021 @12:16PM (#29639521)

And it was unsafe for a few years prior to this event too, with the introduction of Desktop Bridge apps (packaged Win32 hybrid apps running with full trust).

[ Parent | on HN ]

Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by garren on Tuesday December 21, 2021 @04:50PM (#29642556)

Don’t the win32 apps restrict the calls in that subsystem that one can access?

I recall looking into this a while back with the intention of leveraging it for an ancient win32/mfc app. I don’t remember the specifics, but I seem to recall that MS restricted or prevented access to a rather substantial subset of win32.

[ Parent | on HN ]

Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by WorldMaker on Tuesday December 21, 2021 @05:42PM (#29643003)

Not anymore. Microsoft gave up on trying to sandbox Windows Store installs for Win32 apps.

[ Parent | on HN ]

Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by 2ion on Wednesday December 22, 2021 @06:05AM (#29647776)

That's good to know. It was still locked down when I looked into it last time.

[ Parent | on HN ]