General Tech

VSCode's SSH Agent Is Bananas

The VSCode SSH agent introduced a bug that caused SSH keys to be stored in plaintext, which could allow unauthorized access to servers. The agent would store the private key in the user's local environment without any encryption. The issue was reported by a user on HN, and the VSCode team has acknowledged the bug and is working on a fix. The agent was introduced in VSCode 1.59 and has been causing issues for users since.

Read the full article at fly.io →