@wdormann @ajn142 @ifin Oh, who is the "them" in this case? I guess I lost the context somewhere, it's been a week. In VSCode it runs immediately, and then keeps running it every time you interact with VSCode. Doesn't seem right. I need to try it with an absolutely vanilla vscode install though. That's a heavier lift for me right this moment.
11
Replies
·
0
Boosts
My comment is that Mindgard did a less-than-stellar job in conveying the vulnerability in a way that somebody attempting to reproduce it can.
By leaving out the "You must wait 30 minutes for git.exe to launch", they perhaps caused some people (such as myself) to move on and think that it's not legit.
But now that I'm re-reading this thread I'm seeing that there's an iFin writeup that's talking about the VSCode side of things.
