Sākums Izpētīt Palīdzība
Pierakstīties
pbarriat
/
learning-vscode
1
0
Atdalīts 0
Faili Problēmas 2 Izmaiņu pieprasījumi 0 Vikivietne
Etiķetes Atskaites punkti
Jauna problēma

#1 Mention risks with Market Place supply chain attacks?

Atvērta
dfr atvēra 2 gadi atpakaļ · 0 komentāri
François Damien komentēja 2 gadi atpakaļ

When users are enabled with arbitrary code install they must be warned about the consequences of installing extensions without first reviewing them, especially if the extensions involves connecting with SSH to the clusters.

See this article for a general description of the risks associated with the Market Place and this one for a quantitative analysis.

When users are enabled with arbitrary code install they must be warned about the consequences of installing extensions without first reviewing them, especially if the extensions involves connecting with SSH to the clusters. See [this article](https://www.developer-tech.com/news/2023/jan/09/visual-studio-marketplace-supply-chain-attack-vector/) for a general description of the risks associated with the Market Place and [this one](https://blog.checkpoint.com/securing-the-cloud/malicious-vscode-extensions-with-more-than-45k-downloads-steal-pii-and-enable-backdoors/) for a quantitative analysis.
Pierakstieties, lai pievienotos šai sarunai.
Etiķetes
Noņemt etiķetes
Nav etiķešu
Atskaites punkts
Notīrīt atskaites punktus
Nav atskaites punktu
Atbildīgais
Noņemt atbildīgo
Nav atbildīgā
1 dalībnieki
Rakstīt Priekšskatītījums
Notiek ielāde...
Atcelt
Saglabāt
Vēl nav satura.