frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

1-Click GitHub Token Stealing via a VSCode Bug

https://blog.ammaraskar.com/github-token-stealing/
86•ammar2•12h ago

Comments

Noumenon72•52m ago
Thank you for essentially donating the time you spent on this exploit to raise awareness on improving VS Code's security response. You could have just given up on them but you're still trying to help.
zbentley•45m ago
This is a very good writeup.

Zooming way out (perhaps to the point of useless observation), it's a pity that the web embedded VSCode editor is signed into GitHub at all. Defense-in-depth or not, a huge vulnerability surface arises from that original sin. It'd be like if you had a god-permissioned GitHub API token stored in world-readable plaintext on your workstation for the malicious-NPM-package-of-the-week to find.

In a perfect world, it'd be awesome if the in-browser IDE launched with a temporary per-repo permission scope or token that allowed only pull and push to the repo in question; no github.com web session whatsoever. If you want the full GitHub web UI experience, well .... go back to github.com; make github.dev a single-repo service.

I'm assuming that's a) inconvenient for users, b) hard to implement, and c) a historical assumption baked into a lot of the github.dev tooling, though. Ah well.

owl57•33m ago
If the malicious-npm-package-of-the-week is reading arbitrary files on your workstation, isn't it usually able to run git clone/push/whatever with your current credentials anyway?
digi59404•16m ago
Yes, but also no. For example in GitLab a user who’s infected could push code to a branch. Then it could even make a merge request to pull that branch into main (if main is protected).

But then someone else on the team should have to manually approve that MR to allow it to be merged to main.

This kind of defeats the ability of malware to push stuff out automatically.

ammar2•21m ago
> it'd be awesome if the in-browser IDE launched with a temporary per-repo permission scope

That's actually exactly what they do for codespaces. The token only has read/write on the repo you activated for the codespace [1]. They should definitely consider doing that for github.dev as well.

[1] https://orca.security/resources/blog/hacking-github-codespac...

fg137•41m ago
> To those folks, I am sorry, but this is one of the few levers I have to try to influence MSRC and the security posture of VSCode

Someone is going to be blacklisted by Microsoft.

NagatoYuzuru•37m ago
*waifu PFP
NagatoYuzuru•38m ago
> the last time I interacted with MSRC regarding reporting a VSCode bug, it was a horrible experience where they silently fixed the bug

Classic MSRC. It has figured out that researchers will report for free regardless. Why change?

natpalmer1776•20m ago
It was the status quo for a long time, then the pesky security researchers started asking for compensation instead of clout.
ammar2•17m ago
> instead of clout

I'm catching up on the infosec twitter side but it seems like it was even worse. A lot of people have the same story as me in 2023 of "they silently patch the bug and don't even credit you" which really stinks.

natpalmer1776•11m ago
It definitely reminds me of the stereotypes of big business types stepping on the little guys to climb the ladder.

I hope you get credit where credit is due in future endeavors.

pier25•33m ago
The MSRC situation is really unbelievable.

There are probably better sources but I think this video by The Primeagen is a good introduction.

https://www.youtube.com/watch?v=9kxx5xp5nTQ

october8140•22m ago
If you like VSCode but don't like Microsoft, try Zed (zed.dev).

1-Click GitHub Token Stealing via a VSCode Bug

https://blog.ammaraskar.com/github-token-stealing/
89•ammar2•12h ago•13 comments

Use your Nvidia GPU's VRAM as swap space on Linux

https://github.com/c0dejedi/nbd-vram
182•tanelpoder•5h ago•50 comments

Agentic Mfw

https://agenticmotherfucking.website
32•elmerland•1h ago•11 comments

MAI-Code-1-Flash

https://microsoft.ai/news/introducingmai-code-1-flash/
418•EvanZhouDev•9h ago•178 comments

CT scans of BYD car parts

https://www.lumafield.com/scan-of-the-month/byd
271•viasfo•7h ago•107 comments

The American Missile Crisis

https://research.contrary.com/report/the-american-missile-crisis
6•JumpCrisscross•28m ago•1 comments

HHS is overriding peer review to require changes to research scope, design

https://www.science.org/content/article/exclusive-hhs-now-weighing-science-nih-grants
6•SubiculumCode•51m ago•0 comments

Capstone – multi-platform, multi-architecture disassembly framework

https://www.capstone-engine.org/
17•gregsadetsky•1h ago•0 comments

Roku LT Operating System open source distribution

https://blog.roku.com/developer/roku-lt-os
28•dpmdpm•2h ago•10 comments

Are blue zones real? Answering that question is harder then ever

https://www.statnews.com/2026/05/04/are-blue-zones-real-new-scrutiny-longevity-hot-spots/
40•mfld•1d ago•29 comments

Gmail thinks I'm stupid, so I left

https://moddedbear.com/gmail-thinks-im-stupid-so-i-left
696•speckx•8h ago•418 comments

My thoughts after using Clojure for about a month

https://www.acdw.net/clojure/
139•speckx•8h ago•85 comments

Pluto.jl 1.0 release – reactive notebook for Julia

https://discourse.julialang.org/t/pluto-1-0-release/137296
47•fons-p•4h ago•2 comments

AI outperforms law professors in Stanford Law study

https://law.stanford.edu/press/ai-outperforms-law-professors-in-stanford-law-study/
129•berlianta•4h ago•121 comments

Can A.I. produce writing that we want to read?

https://www.newyorker.com/news/fault-lines/can-ai-produce-writing-that-we-actually-want-to-read
10•fortran77•1h ago•9 comments

Open Repair Data Standard – Open Repair Alliance

https://openrepair.org/open-data/open-standard/
107•cassepipe•8h ago•3 comments

A walking tour of surveillance infrastructure in Seattle (2020)

https://coveillance.org/a-walking-tour-of-surveillance-infrastructure-in-seattle/
383•eustoria•14h ago•262 comments

4K years ago, Mohenjo-daro grew more equal over time

https://archaeologymag.com/2026/05/mohenjo-daro-grew-more-equal-over-time/
59•marojejian•5h ago•33 comments

Words of Type

https://wiki.wordsoftype.com/
5•tobr•2d ago•0 comments

HP re-releases classic computer science calculator: The HP-16C

https://hpcalcs.com/product/hp-16c-collectors-edition/
137•dm319•8h ago•88 comments

How we index images for RAG

https://www.kapa.ai/blog/how-we-index-images-for-rag
102•mooreds•11h ago•14 comments

Loading Sega Games Off a Vinyl Record [video]

https://www.youtube.com/watch?v=c744iD0_fWU
19•zdw•2d ago•4 comments

OpenFOV – Webcam head tracking for iRacing

https://www.openfov.com/
95•mwit2023•3d ago•50 comments

Multicore suppport for DOS is real – partly

https://www.vogons.org/viewtopic.php?t=111336
68•beebix•2d ago•11 comments

Trump signs downsized AI order after weeks of reversals

https://www.politico.com/news/2026/06/02/trump-signs-downsized-ai-order-00946389
188•_alternator_•11h ago•133 comments

NLAB: The worlds smallest electronics lab

https://getnlab.com/
4•doctoboggan•1h ago•0 comments

Show HN: Paseo – Beautiful open-source coding agent interface

https://github.com/getpaseo/paseo
37•timhigins•5h ago•19 comments

Expanding Project Glasswing

https://www.anthropic.com/news/expanding-project-glasswing
163•surprisetalk•14h ago•218 comments

Preparing for KDE Plasma's Last X11-Supported Release

https://blog.davidedmundson.co.uk/blog/596/
159•jandeboevrie•13h ago•189 comments

Fidonet: Technology, Use, Tools, and History (1993)

https://www.fidonet.org/inet92_Randy_Bush.txt
154•BruceEel•14h ago•64 comments