2026-01-21 08:09 UTC
@0xabad1dea@infosec.exchange @emily_s@mastodon.me.uk In fact, that prompt /is/ the improvement over back in the day when editors would just do it completely silently. If anything, it feels like LSP was a bit of a turning point around editors asking at all.
(That said, the prompts are still pretty awful.. lsp-mode (in Emacs) just asks "would you like to import this project?".. would you expect that to allow arbitrary code execution too?)
Replies (1)
-
@dalias@hachyderm.io 2026-01-21 18:44
@natkr@hachyderm.io @0xabad1dea@infosec.exchange @emily_s@mastodon.me.uk That's hilarous that emacs added support for these backdoor shenanigans. It's bonkers to me that people think build recipes, CI stuff, etc. should be something you're even able to run in the same execution/privilege context as your editor without very very explicit opt-in.