News for hackers. Stuff that matters.

A comment on VSCode remote code execution advisory. Parent comment

Re:VSCode remote code execution advisory by EvanAnderson on Tuesday December 06, 2022 @11:01PM (#33890488)
Yeah, but who uses MSIs? Windows Installer is just a flash in the pan. It's so much easier to just make an Inno Setup-based SETUP.EXE. /s

It makes me shudder to think how many hours (days? weeks?) of my life I'd have back if developers had just packaged their Windows application as MSIs instead of making me, as a sysadmin who wants consistently updated client computers, do it for them.

[ Parent | on HN ]
Re:VSCode remote code execution advisory by vbezhenar on Wednesday December 07, 2022 @04:46AM (#33892479)
vscode does not provide MSI for download. Even Microsoft can't be bothered to do it.
[ Parent | on HN ]
Re:VSCode remote code execution advisory by sllewe on Wednesday December 07, 2022 @11:35AM (#33896453)
MSFT provides a method to repackage .EXE into a deployable package (named: Intunewin).

https://github.com/microsoft/Microsoft-Win32-Content-Prep-To...

[ Parent | on HN ]
Re:VSCode remote code execution advisory by EvanAnderson on Wednesday December 07, 2022 @06:29AM (#33893195)
The inmates have been running the asylum at Microsoft for a number of years now. I assume it’s necessary to re-invent wheels, badly, for career advancement. (That’s not to say that MSI is particular nice, but it works reasonably well and saves a lot of downstream headaches.)
[ Parent | on HN ]