AI slop has become an absolute plague on this forum.
First Self-Propagating Worm Using Invisible Code Hits OpenVSX and VS Code
61–63 of 63 posts
Re: First Self-Propagating Worm Using Invisible Code Hits OpenVSX and VS Code
#62Why not just indicate non-printable characters in code review tools? I've always wondered that, regardless of security implications. They are super rare in real code (except line breaks and tabs maybe), so no disruption in most cases. Also, as notes in other comments, you can't do shady stuff purely with invisible code. The article seems bit sensationalist to me.
Because spaces, tabs, CR and LF are invisible too yet perfectly normal to find within code. You could very easily implement a decode() function that uses only those characters.
But to get any meaningful result, you'd need to insert them in unusual ways or amounts, likely breaking formatting rules. Trailing whitespace or excessive line breaks should be caught by linting tools and/or code review.
Re: First Self-Propagating Worm Using Invisible Code Hits OpenVSX and VS Code
#63[dead]