connor4312

Copilot will prompt you before accessing untrusted URLs. It seems a crux of the vulnerability that the user didn't need to consent before hitting a url that was effectively an open redirect.

@ VS Code we've been collaborating on this and plan to ship initial support for registries in our next release.

For the same reason government in general (e.g. the US military) isn't funded by one big GoFundMe. The marginal value any individual actor gains from their investment in public research or services is almost zero. It only works when it's prescriptive on a large scale. See: the tragedy of the commons.

Crowdstrike could have deployed the same broken code in their Linux or macOS agents. Nothing much for Windows to do if a kernel driver is segfaulting (when disabling it could be dangerous for users.)

That should work fine in the vscode debugger, you just want to make sure that the transpiler you're using is generating sourcemaps. Generally they do by default. If you have issues, open a github issue and I'll fix it :)

In the VS Code JS debugger, there's an option to "exclude caller" on a call frame that which prevents stacks with the given caller from pausing at a location. As mentioned elsewhere, browser devtools have something similar with "Never pause here." Do you think there's more than tools can do to make your process easier?

I maintain the vscode debugger and found both the article and your comment interesting--there's a large overlap between "programs with anti-debugger techniques" and "programs that are hard to debug."

Because your example is a breaking change, and breaking changes are hard to make in a runtime that needs to reasonably support two decades worth of web content.

For example, if you have a `binarySearch` function that returns -1 if an element isn't found, a developer might do something. `const result = arr[index]; if (result !== undefined) { ... }`. This would then start returning the last element instead of undefined at that index.

Is your microbiome not "you"? It's as active a participant in your hormone balance as any other organ in your body.

You might say "I'm hungry", but it's not your rational brain deducing it's time to be hungry. Is an "I'm happy" triggered from the gut any less valid?

As I understand the blog post, the difficult (and buggy) part is not the addition of latency, but calculating how much latency to add and where to add it. I'm not sure how tc would help much here, and actually don't see anything to indicate they weren't using tc already.

I made the switch to a projector a couple years ago and advocate highly for them. The screen can disappear when not in use, and they're "dumb by default". New LED projectors have bulbs rated to last 10k hours or more.

Wow, amazing ASCII art! Are you selling an NFT of it?

Additionally, the language server used to power editors is long lived. TypeScript isn't just the compiler.

When you said "some crazy canuck", I immediately knew it must be AvE