News for hackers. Stuff that matters.

A comment on RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit.

Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by azalemeth on Tuesday December 21, 2021 @10:06AM (#29638034)
The "Your editor has DRM" section alone [0] is enough for me to continue to advocate for a better user-friendly FOSS IDE, in addition to the wonderful giants of emacs & vim, and to avoid the VS Code "kool aid".

[0] https://parsiya.net/blog/2021-12-20-rce-in-visual-studio-cod...

[ Parent | on HN ]
Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by throw10920 on Tuesday December 21, 2021 @11:44AM (#29639131)
Emacs' TRAMP is remote-access like VSCode server - except in addition to being completely open-source, it also doesn't require that you install anything on the server, which ranges from being annoying to a show-stopper in corporate environments.

However...I love Emacs, but as much as I hate to admit it, VSCode's out-of-the-box experience is significantly better than even starter kits like Doom and Spacemacs ):

VSCode is far more "user-friendly" than Emacs or Vim at this point in time. That's definitely something that can be changed, but let's not delude ourselves...

[ Parent | on HN ]
Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by vorpalhex on Tuesday December 21, 2021 @12:17PM (#29639530)
VSCodium is a FOSS build of the MIT VSCode repo, with an alternate FOSS compliant extension source. Note that some fancy extensions are missing, but otherwise works 100%. I have been using VSCodium as my main IDE for about a year now.

https://vscodium.com/

[ Parent | on HN ]
Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by j0057 on Tuesday December 21, 2021 @02:17PM (#29640949)
One of those extensions is the one that implements C# debugging, so for C# debugging, VSCodium is a fancy editor, not an IDE.
[ Parent | on HN ]
Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by executive on Tuesday December 21, 2021 @10:08PM (#29645155)
Tried this today. Cannot use with Remote-WSL extension & others.
[ Parent | on HN ]
Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by vorpalhex on Wednesday December 22, 2021 @12:06AM (#29645790)
Yep, the WSL extensions are closed source and hard locked to the proprietary Microsoft build of VSCode.
[ Parent | on HN ]
Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by jodrellblank on Tuesday December 21, 2021 @11:43AM (#29639110)
VS Code is MIT Licensed - https://github.com/Microsoft/vscode

Arguably the MIT license gives you more Freedom than the GPL'd Linux kernel or GNU utilities. Trying to draw a distinction between "evil user-unfriendly Microsoft stuff" and "Holy Saviour FOSS" is not meaningful anymore.

[ Parent | on HN ]
Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by throw10920 on Tuesday December 21, 2021 @11:48AM (#29639170)
Some parts of VSCode are MIT Licensed - not all of it, and in particular, parts of the standard VSCode that almost everybody downloads are straight-up proprietary, per the article[1].

[1] https://parsiya.net/blog/2021-12-20-rce-in-visual-studio-cod...

[ Parent | on HN ]
Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by jodrellblank on Tuesday December 21, 2021 @03:09PM (#29641497)
> "Some parts of VSCode are MIT Licensed - not all of it"

The source code, the editor are. This is like Oracle releasing a proprietary plugin for EMACS and distributing it on Oracle Linux, and someone saying "this is bad, we need FOSS editors!". That wouldn't make EMACS not-FOSS.

(Is it trolling of me to point out that of course the thing people actually want is not the FOSS bit? There are dozens of editors, people want features not ideology)

[ Parent | on HN ]