okay, so here's what I'm thinking right now:
1) we, people who like things to have some reasonable baseline amount of safety in our everyday tools, have been complaining for years that VS Code's plugin model is absurdly unsafe and an absolute open sewer; Microsoft shrugs and says it's the user's responsibility to only install reliable plugins
2) as foretold by the prophecy, a major plugin from a major company is compromised and begins pushing shell scripts to automatically install ssh backdoors, which is a thing VS Code plugins can do despite being fucking JAVASCRIPT PLUGINS for a TEXT EDITOR
3) within hours, Binance, the exact sort of company that would be using Claude for daily programming tasks, suffers a massive compromise through a devops laptop and literally billions of dollars in cryptocoins are funneled into the North Korean war chest, the largest heist in history. (We don't know for *sure* at the moment that these are connected, but they sure sound pretty likely to be connected.)
Microsoft, what exactly are you planning to do about your share of responsibility for this catastrophe?
abadidea
npub1n7…07g0f
2026-10-30 12:19:48 UTC
Author Public Key
npub1n7kt2deqy3xk93nzcvxyy0twcw3jmhvyjhec0pss4punpsyr884ql07g0fSeen on
wss://relay.momostr.pinkPublished at
2026-10-30 12:19:48 UTCEvent JSON
{
"id": "7649638cf4c00f8b0c3befa9921a3f424dd8ea3ae152ab60d16c4fd9c7b63ac3",
"pubkey": "9facb53720244d62c662c30c423d6ec3a32ddd8495f3878610a87930c08339ea",
"created_at": 1793362788,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@0xabad1dea/117529823729259748",
"web"
],
[
"proxy",
"https://infosec.exchange/users/0xabad1dea/statuses/117529823729259748",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/0xabad1dea/statuses/117529823729259748",
"pink.momostr"
],
[
"-"
]
],
"content": "okay, so here's what I'm thinking right now:\n\n1) we, people who like things to have some reasonable baseline amount of safety in our everyday tools, have been complaining for years that VS Code's plugin model is absurdly unsafe and an absolute open sewer; Microsoft shrugs and says it's the user's responsibility to only install reliable plugins\n\n2) as foretold by the prophecy, a major plugin from a major company is compromised and begins pushing shell scripts to automatically install ssh backdoors, which is a thing VS Code plugins can do despite being fucking JAVASCRIPT PLUGINS for a TEXT EDITOR\n\n3) within hours, Binance, the exact sort of company that would be using Claude for daily programming tasks, suffers a massive compromise through a devops laptop and literally billions of dollars in cryptocoins are funneled into the North Korean war chest, the largest heist in history. (We don't know for *sure* at the moment that these are connected, but they sure sound pretty likely to be connected.)\n\nMicrosoft, what exactly are you planning to do about your share of responsibility for this catastrophe?",
"sig": "93817740e66e8324596c9f4f01a9e3a295fb89c3804bdf0799d3d97349018b0bf6490c41809030dfc94b1e63afe94f101fbce291f55ae1806624dbea492c80e2"
}