clacke: seeking 🇸🇪🇭🇰💙💛 on Nostr: "VSCode’s SSH Agent Is Bananas" refers to the fact that the remote agent is written ...
"VSCode’s SSH Agent Is Bananas" refers to the fact that the remote agent is written in Node, that Code installs and runs Node on the remote machine, and that Code is allowed to do anything it likes on the remote machine.
Well, yeah. You let Code ssh into your machine and get a shell. Any limitations on what it can do will be self-imposed. I do agree that you wouldn't want Code to ssh into production.
Published at
2025-02-08 06:30:12Event JSON
{
"id": "eb216e0cb1a83bd21b307023809ab5a791a7b62a4ce69baf638f6a0cacbf88a7",
"pubkey": "9c8434d084225d99ae8feedfec7dfd983801af18c94106019efe3d667391bfbc",
"created_at": 1738996212,
"kind": 1,
"tags": [
[
"p",
"89d48172eef32d20af9e11580d667d4f5ec195107a408bf9abbe0213d0b8aa1e",
"wss://relay.mostr.pub"
],
[
"e",
"66d75ca8a328a95e3fd3adac9c01f08f9c7132ea5fca1286a60a0ef79b4080c9",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://libranet.de/objects/0b6b25a8-8567-a6f9-f4e8-bd1063598195",
"activitypub"
]
],
"content": "\"VSCode’s SSH Agent Is Bananas\" refers to the fact that the remote agent is written in Node, that Code installs and runs Node on the remote machine, and that Code is allowed to do anything it likes on the remote machine.\n\nWell, yeah. You let Code ssh into your machine and get a shell. Any limitations on what it can do will be self-imposed. I do agree that you wouldn't want Code to ssh into production.",
"sig": "53616333e57a2beb45a71da414aa3c46752c62b515d0fd04890088d94d471474b4af37c34e436f001749cd3d384aadd30fc295793b5fd60dad5b942872f6e8ae"
}
