News for hackers. Stuff that matters.
Re:VSCode remote code execution advisory by closeparen on Tuesday December 06, 2022 @11:08PM (#33890522)
>Realistically, how often do you need to install brand-new non-standard software? If it is a regular occurrence then you need a process by which you can request it and the IT team can assess how they manage it.

Brew is a pretty regular part of my workflow, although that's more often restoring the environment after an IT-mandated OS upgrade than net-new software.

Also there's a couple of thousand third-party dependencies in the monorepo, seeing ~100 changes per month.

I'm grateful that engineering workflow is managed by engineering platform teams... corporate IT is a totally different beast, and it'd be pretty dysfunctional if they micromanaged this stuff..

Re:VSCode remote code execution advisory by calvinmorrison on Tuesday December 06, 2022 @11:19PM (#33890582)
I was asked what software I needed and dumped the output of /usr/bin when they pressed me for an exact list. It was bizarre
Re:VSCode remote code execution advisory by ParetoOptimal on Wednesday December 07, 2022 @09:30AM (#33894695)
I hope you sorted by .bash_history otherwise they'll be busy verifying hello, bc, and mount when you need vim most.