nixCraft 🐧
Another shity Microsoft product doing nasty things. Every YouTube tutorial or Twitch stream starts with VS Code. This is another example of how Microsoft push their products with bad security practices and their shity tech like Copilot, Github, C#, TypeScript, etc.
Read: VSCode’s SSH Agent Is Bananas https://fly.io/blog/vscode-ssh-wtf/
If possible avoid Microsoft spyware and all of their shity services that now push AI like crazy person. It is a massive mess.
tizmic
@nixCraft Can VSCodium resolve this?
Johan
@nixCraft Does the problem exist in VSCodium aswell?
Areskill
@nixCraft Typescript is not shitty tech.
It's a shit layer above shitty tech.
nixCraft 🐧
@nazokiyoubinbou Of course, it is not OpenSSH's (or SSH protocl) problem. It is the software company's poor implementation. You have to choose what is best for you. Security should always be a priority, and remember the KISS principle.
Nazo
@nixCraft I don't like the way the focus of this seems to be solely on attacking SSH itself rather than the specific implementation being used. SSH is a very valid and very useful protocol that existed long before MS used it in any form and will continue to exist long after.
Don't attack SSH with its myriad of uses just because MS uses it a certain way.
nixCraft 🐧
@tizmic No idea.
nixCraft 🐧
@_nibbles IDK. You have to test it.
nixCraft 🐧
@jean_dupont Hehe.. true.
Cris
@nixCraft I never felt safe to edit remotely with any editor. Calm me crazy but I still love my vim and neovim on my dev machine.
But I understand that this is not everyone’s cup of tea and that I might be a bit weird.
Does this vscode ssh stuff come with a warning what it’s installing? It’s not something one would expect or even think about.
nixCraft 🐧
@janantos i slightly edited the post and now it reads as: "promote their tech like Copilot, Github, C#, TypeScript, etc. " that way it is less inflammatory
Jan Antoš
@nixCraft dotnet (csharp), typescript are not shitty products.
nixCraft 🐧
@crisl_at I don't think so it provide any warning but they might add it now as this post is getting attention of Microsoft.
NickServ
@nixCraft Also, as of a year ago at least, one had to download the fixed Powershell version of OpenSSH from GitHub. The SSH Agent didn't work right allowing passwordless key SSH logins. In other words SSH private keys are unusable by SSH Agent in Microsoft's implementation without the github fix. It's a manual fix if you know about it. The updated version couldn't even be obtained through any windows update methods. I'm not even sure its available now in windows update? Microsoft control thing.
Cris
@nixCraft But we shouldn’t have to rely on posts getting traction. Doing stuff that way is shady a* f* anyway, no point in telling you this. Hated Microsoft since windows 3.1, gave up on the hate some time ago but this shit just keeps confirming I should have kept my opinion about Ms. They won’t change.
０７６萌ＳＮＳ is a social network, courtesy of ０７６. It runs on GNU social, version 2.0.2-beta0, available under the GNU Affero General Public License.
All ０７６萌ＳＮＳ content and data are available under the Creative Commons Attribution 3.0 license.