Halaman utama Jelajahi Bantuan
Masuk
pbarriat
/
learning-vscode
1
0
Fork 0
Berkas Masalah 2 Permintaan Tarik 0 Wiki
Label Tonggak sejarah
Isu Baru

#1 Mention risks with Market Place supply chain attacks?

Terbuka
dibuka 2 tahun lalu oleh dfr · 0 komentar
François Damien komentar 2 tahun lalu

When users are enabled with arbitrary code install they must be warned about the consequences of installing extensions without first reviewing them, especially if the extensions involves connecting with SSH to the clusters.

See this article for a general description of the risks associated with the Market Place and this one for a quantitative analysis.

When users are enabled with arbitrary code install they must be warned about the consequences of installing extensions without first reviewing them, especially if the extensions involves connecting with SSH to the clusters. See [this article](https://www.developer-tech.com/news/2023/jan/09/visual-studio-marketplace-supply-chain-attack-vector/) for a general description of the risks associated with the Market Place and [this one](https://blog.checkpoint.com/securing-the-cloud/malicious-vscode-extensions-with-more-than-45k-downloads-steal-pii-and-enable-backdoors/) for a quantitative analysis.
Masuk untuk bergabung dalam percakapan ini.
Label
Label yang jelas
Tidak ada Label
Tonggak
Tonggak yang jelas
Tidak ada tonggak
Penerima
Hapus penerima hak
Tidak ada penerima
1 Peserta
Tulis Pertinjauan
Memuat...
Batal
Simpan
Belum ada konten.