Post highlights bidirectional execution risk in VSCode remote protocol
1 Sep 23 5:01 PM · 1d ago · 1 article · 2 posts · 3 comments · 3 sources · development 1 of 2
The Fly.io analysis identifies that VSCode's WebSockets-based remote protocol allows the agent on the remote machine to wander the filesystem, edit arbitrary files, launch shell processes, and persist itself—granting broad execution capabilities initiated by the remote.
“In security-world, there's a name for tools that work this way. I won't say it out loud, because that's not fair to VSCode, but let's just say the name is murid in nature.”
Fly.ioFly.io Cloud platform operator
The whole story articlespostscomments the bright band is this development · numbered dots are the others · click one to jump
Reported in the same hours no headline names this development itself — these 1 claim were published in its stretch
-
2 outlets VSCode's SSH Agent Is Bananas (2025)
first by HN Best, 1d ago · also HN Frontpage
1 more headline
- VSCode's SSH Agent Is Bananas HN Frontpage · 1d ago
What people said 4 voices · verbatim
-
When I give an agent ssh access to something I want to be able to watch and fully understand what it's doing. I want it to essentially only "type" things into the CLI that I could have typed myself, I can comprehend what it's doing, and am not surprised by the results. Opencode and a smart LLM (qwen 3.8-flash-next, deepseek v4 0731 or smarter) do…
-
H
VSCode's SSH Agent Is Bananas L: https:// fly.io/blog/vscode-ssh-wtf/ C: https:// news.ycombinator.com/item?id=4 9822555 posted on 2026.09.23 at 17:01:48 (c=0, p=4)
-
Missing a (2025)FYI VSCode's SSH Agent is a godsend for remote development - the "disadvantages" that Fly lists are part of its advantages. I've worked in several teams that have made extensive use of the extension, and it's never been an issue. You can restrict SSH access arbitrarily to ensure whatever security or access guardrails you need.
-
This part of VSCode's architecture is acceptable to me. The reverse direction, where a compromised remote can do whatever it wants to my local machine, is not.
All 2 developments of Fly.io details VSCode SSH agent architecture, security… →
Hacker NewsMastodonNewswires