A concise critique of how VSCode performs remote editing over SSH: Fly explored integrating with VSCode for running LLM-driven code agents on ephemeral Linux instances rather than on developers' laptops, to keep iterative, execution-driven LLM workflows contained. Emacs’ Tramp model, which runs commands over a simple remote shell, was presented as the minimalist ancestor VSCode could emulate. Instead, VSCode installs a staged agent on the remote host that includes a Node binary and a persistent runtime, an architecture that departs sharply from Tramp’s lightweight approach.
The investigation shows the agent opens a WebSocket back to the VSCode front end over port-forwarded SSH and exposes a protocol able to traverse the filesystem, edit files, spawn interactive PTYs, and persist itself. That capability makes remote instances effectively controllable by VSCode and raises serious operational and security concerns - especially on dev servers or during production incidents. Fly ultimately found that none of this invasive machinery is necessary to connect to Fly Machines, but the discovery is a strong warning about VSCode’s remote agent model. Written by Thomas Ptacek, Feb 7, 2025.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
China has implemented new travel regulations that are causing concern among technology companies and professionals. These rules are impacting the movement of talent and the operations of tech giants within the country. (dw.com)
OSCE's ODIHR organization will now consider reports of alleged election fraud in Sweden for future assessments. Several criminal investigations into suspected vote-rigging and vote-buying have been launched after the recent election, along with a surge in election result appeals. (tv4.se)
A Reddit moderator was ordered to pay Nintendo $4.5 million for operating Switch piracy shops. Nintendo accused James 'archbox' Williams of running illegal stores selling pirated Switch games. (theverge.com)
Nearly half of 4,688 small-business websites in a 2026 study did not implement any of seven key security headers. The study highlights widespread gaps in web security practices among small local businesses. (rackcrunch.com)
The Cutting Room Floor wiki was taken offline after a DDoS attack allegedly triggered by an banned AI user using Claude Code. The user reportedly evaded a ban, provoked anti-AI content, and sent abuse reports to the hosting provider. (kotaku.com)
A vulnerability in ansi2html.py allowed attackers to inject malicious scripts into build logs on builds.sr.ht, leading to account takeovers through XSS exploits. The flaw was wormable, affecting viewers of compromised logs and highlighting security risks in CI platforms. (blog.arusekk.pl)
Today's best Hacker News stories, summarized and screenshotted, one email a day.