News for hackers. Stuff that matters.

A comment on RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit.

Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by kerng on Tuesday December 21, 2021 @11:48AM (#29639173)
A bug like this shows that there is probably no security reviews done at all in the VS Code team. This would be flagged right away in a threat model review. Quite worrying.

Also, strange that this doesn't get a bug bounty payout - it's very severe.

[ Parent | on HN ]

There are no comments on this comment yet.