Re:VSCode remote code execution advisory
by calvinmorrison on Tuesday December 06, 2022 @11:19PM
(#33890582)
I was asked what software I needed and dumped the output of /usr/bin when they pressed me for an exact list. It was bizarre
Re:VSCode remote code execution advisory
by ParetoOptimal on Wednesday December 07, 2022 @09:30AM
(#33894695)
I hope you sorted by .bash_history otherwise they'll be busy verifying hello, bc, and mount when you need vim most.
Brew is a pretty regular part of my workflow, although that's more often restoring the environment after an IT-mandated OS upgrade than net-new software.
Also there's a couple of thousand third-party dependencies in the monorepo, seeing ~100 changes per month.
I'm grateful that engineering workflow is managed by engineering platform teams... corporate IT is a totally different beast, and it'd be pretty dysfunctional if they micromanaged this stuff..