41–50 of 488 posts
Maybe I'm missing something really obvious, but... 3,800 repos? I guess I find it kind of surprising they have that many!
Am I missing the joke here... they have hundreds of millions of repos.
The ones used for running the site itself.
Though, its so many that i think there are some customer ones in there too.
Maybe I'm missing something really obvious, but... 3,800 repos? I guess I find it kind of surprising they have that many!
Am I missing the joke here... they have hundreds of millions of repos.
I mean, I understand that it is hard to sandbox Node.js applications, but apparently Microsoft has put way more effort into their Copilot slop than security.
[0] https://github.com/microsoft/vscode/issues/52116
I'm also mirroring public ones to Codeberg.
I'll write about it when I'm done.
Earlier quoted context omitted.
The data has been stolen by a criminal group. Paying for "restoring" the data does not guarantee they will delete all copies. There is no way of proving they actually did and they have in fact very little incentive to actually delete it. You have to take their words for it but how can you trust crooks?
> You have to take their words for it but how can you trust crooks? Because these are repeat actors. If they take a ransom and then re-sell it, no company will pay them ever again. Don't think of experienced criminal enterprises as "groups of irrational scoundrels." They are companies, with employees, who understand game theory.
Maybe I'm missing something really obvious, but... 3,800 repos? I guess I find it kind of surprising they have that many!
I really hope this pushes Microsoft to add a explicit permission system to VS Code extensions, and improve security of dev containers.
So which extension? Why don't they tell us?
A few days ago I saw I had an update to the Twig extension. The UI flagged it as having new executable code in the update bundle, so I didn't install the update, disabled the extension as I wasn't working on Drupal views that day, and went about my work. I didn't have time to investigate the new update's contents. When I went back to the extension page, it was taken down: https://open-vsx.org/extension/whatwedo/twig…
They also have an online demo/playground so you can at least give it a shot to see if it works.
I’ve used the twiggy LSP before and there seems to be a few VS code extensions for it: https://marketplace.visualstudio.com/items?itemName=moetelo.... and https://marketplace.visualstudio.com/items?itemName=Stanisla...