Post #3861702
2026-07-16 15:26 UTC
@wdormann@infosec.exchange @ajn142@infosec.exchange @ifin@infosec.exchange Oh, who is the "them" in this case? I guess I lost the context somewhere, it's been a week. In VSCode it runs immediately, and then keeps running it every time you interact with VSCode. Doesn't seem right. I need to try it with an absolutely vanilla vscode install though. That's a heavier lift for me right this moment.
Replies (1)
-
@wdormann@infosec.exchange 2026-07-16 15:35
@Sempf@infosec.exchange @ajn142@infosec.exchange @ifin@infosec.exchange My comment is that Mindgard did a less-than-stellar job in conveying the vulnerability in a way that somebody attempting to reproduce it can. By leaving out the "You must wait 30 minutes for git.exe to launch", they perhaps caused some people (such as myself) to move on and think that it's not legit.