News for hackers. Stuff that matters.

A comment on Zed Editor automatically downloads binaries and NPM packages without consent. Parent comment

Re:Zed Editor automatically downloads binaries and NPM packa... by bippihippi1 on Monday July 08, 2024 @05:29AM (#40903936)
except for giving network access to extensions having no way to audit if not open source.
[ Parent | on HN ]
Re:Zed Editor automatically downloads binaries and NPM packa... by rfoo on Monday July 08, 2024 @08:26AM (#40904801)
oh come on, if an extension comes with no source code it means it comes with a native binary (because otherwise it's JavaScript and there, are, no, good, JavaScript, obfuscation, in, this, world, period), and does it really matter if it has network access ??? it may as well just inject cryptominer to your ~/.bashrc.
[ Parent | on HN ]