logoalt Hacker News

angry_octettoday at 1:23 AM1 replyview on HN

It also makes your local client an extension of the remote box. That is going directly against expectations for remote access.


Replies

not_a_bot_4shotoday at 2:32 AM

It's right there though:

> # Security Note > > Using Remote-SSH opens a connection between your local machine and the remote. Only use Remote-SSH to connect to secure remote machines that you trust and that are owned by a party whom you trust. A compromised remote could use the VS Code Remote connection to execute code on your local machine.

From https://marketplace.visualstudio.com/items?itemName=ms-vscod...

Big bold text and everything