HNHacker News
TopNewBestAskShowJobs

isidorn

458 karma · joined April 20, 2020

Microsoft | VS Code
submissionscomments
isidorn··on Material Theme has been pulled from VS Code's marketplace
Thank you. We will security audit this extension today and take action if needed.
isidorn··on Material Theme has been pulled from VS Code's marketplace
Thank you for letting us know. We are investigating.
isidorn··on Material Theme has been pulled from VS Code's marketplace
Thanks. Our security researchers will review this today and we might take it down. We reached out to the new author and he does not have malicious intent, and agreed that we just take down the new extension if we see something is off.
isidorn··on Material Theme has been pulled from VS Code's marketplace
The publisher Equinusocio was banned.
isidorn··on Material Theme has been pulled from VS Code's marketplace
I am in European time and I do not know what happened on that post (since I was sleeping). I assume it were some heated arguments between maintainer and community about license/copyrights/open source maintenance.
isidorn··on Material Theme has been pulled from VS Code's marketplace
This is tracked in this feature request https://github.com/microsoft/vscode/issues/52116

We do not plan to add a permission model in the next 6 months.

isidorn··on Material Theme has been pulled from VS Code's marketplace
Thanks for flagging it. Our security researchers will analize it and based on their findings we might remove this one as well.
isidorn··on Material Theme has been pulled from VS Code's marketplace
Hi - Isidor here from the VS Code team.

A member of the community did a deep security analysis of the extension and found multiple red flags that indicate malicious intent and reported this to us. Our security researchers at Microsoft confirmed this claims and found additional suspicious code.

We banned the publisher from the VS Marketplace and removed all of their extensions and uninstalled from all VS Code instances that have this extension running. For clarity - the removal had nothing to do about copyright/licenses, only about potential malicious intent.

Expect an announcement here with more details soon https://github.com/microsoft/vsmarketplace/

As a reminder, the VS Marketplace continuously invests in security. And more about extension runtime trust can be found in this article https://code.visualstudio.com/docs/editor/extension-runtime-...

Thank you!

isidorn··on GitHub Copilot: The Agent Awakens
Sorry about that. Can you switch to copilot chat pre-release extension. Should be a big button "switch to pre-release".

We are tracking this issue here https://github.com/microsoft/vscode/issues/239836

isidorn··on GitHub Copilot Extensions are all you need
Thanks for pointing out. My mistake, will fix.
isidorn··on Pursuit of "Wicked Smartness" in VS Code
Copilot chat, agents, speech and convenient AI features in VS Code.
isidorn··on Ask HN: I'm a software engineer going blind, how should I prepare?
Hi,

My name is Isidor and I work on VS Code. Here's some hopefully useful advice:

* Join a screen reader mailing list and get to know the commnity: Program-L is the name of the general list and there is one list for Orca Screen Reader in case you are a Linux user

We try hard to make VS Code accessible so in case you decide to use VS Code:

* We have a gitter channel for accessibility which you can join https://gitter.im/Microsoft/vscode-a11y

* You can file issues and provide feedback as we try to improve continously https://github.com/microsoft/vscode

* Feel free to ping me @isidorn on either of those or on Twitter. And let me know if we can help more.

I wish you all the best