VSCode's SSH agent is bananas

Re:VSCode's SSH agent is bananas by kazinator on Friday February 07, 2025 @09:23PM (#42979783)

"SSH agent" is a confusing term to use here, because it usually stands for a daemon that caches authentication tokens.

[ Parent | on HN ]

Re:VSCode's SSH agent is bananas by CGamesPlay on Friday February 07, 2025 @09:47PM (#42979905)

Agreed, because VSCode does not provide an SSH Agent but does communicate with your local one (their own version of ForwardAgent, complete with the security implications that carries). And the way it does that breaks a popular macOS SSH agent: https://github.com/maxgoedjen/secretive/issues/543

[ Parent | on HN ]

Re:VSCode's SSH agent is bananas by epistasis on Friday February 07, 2025 @10:38PM (#42980145)

Oh shoot, secretive is one of the few ways I knew of to keep track of each time an SSH key was actually used to auth something. I love using Agent Forwarding but the idea of anybody with root being able to arbitrarily auth stuff gave me a (perhaps unreasonable) feeling of insecurity.

[ Parent | on HN ]

Re:VSCode's SSH agent is bananas by RockRobotRock on Saturday February 08, 2025 @04:12AM (#42981632)

I love secretive.

[ Parent | on HN ]

Re:VSCode's SSH agent is bananas by rednafi on Friday February 07, 2025 @09:41PM (#42979873)

The "VSCode" before "SSH Agent" does the disambiguation fairly well.

[ Parent | on HN ]

Re:VSCode's SSH agent is bananas by bqmjjx0kac on Friday February 07, 2025 @09:53PM (#42979939)

I, for one, was actually confused.

[ Parent | on HN ]

Re:VSCode's SSH agent is bananas by akvadrako on Saturday February 08, 2025 @03:31AM (#42981448)

Only of you already know what the VSCode agent does and then you don't need the article.

[ Parent | on HN ]