Top all-time · #6568
Hackerman's Hacking Tutorials
Personal blog · parsiya.net/blogsecurityprogramming
Hackerman's Hacking Tutorials is a personal blog at parsiya.net about security and programming. Since 2014, 12 different Hacker News readers have linked it 12 times. It is still writing: the last post was on 2026-09-17, and you can follow it by feed.
Too few sampled comments (5) to say how often HN recommends it.?
Why HN links it
HN readers link this security blog's post on an RCE in VS Code's Remote WSL, cited in discussions of proprietary parts of VS Code and DRM in Microsoft extensions such as Pylance.
Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- /blog/2021-12-20-rce-in-visual-studio-codes-remote-wsl-for-fun-and-negative-profit/4 people · 4 mentions · first linked 2021-12-21
What Hacker News says?
I don't get the video https://parsiya.net/blog/2021-12-20-rce-in-visual-studio-cod... He goes to the hacker website and then calculator opens?
Comment linking /blog/2021-12-20-rce-in-visual-studio-codes-remote-wsl-for-fun-and-negative-profit/09-poc1.gif
on “RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit”Submitted RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit as a story · 327 points
HN discussionSome parts of VSCode are MIT Licensed - not all of it, and in particular, parts of the standard VSCode that almost everybody downloads are straight-up proprietary, per the article[1]. [1] https://parsiya.net/blog/2021-12-20-rce-in-visual-studio-cod...
Comment linking /blog/2021-12-20-rce-in-visual-studio-codes-remote-wsl-for-fun-and-negative-profit/
on “RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit”Submitted My Adventure with Fireeye's FLARE Challenge as a story · 14 points
HN discussionThe "Your editor has DRM" section alone [0] is enough for me to continue to advocate for a better user-friendly FOSS IDE, in addition to the wonderful giants of emacs & vim, and to avoid the VS Code "kool aid". [0] https://parsiya.net/blog/2021-12-20-rce-in-visual-studio-cod...
Comment linking /blog/2021-12-20-rce-in-visual-studio-codes-remote-wsl-for-fun-and-negative-profit/
on “RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit”Submitted Semgrep: The Surgical Static Analysis Tool as a story · 3 points
HN discussionYou can switch the extension marketplace, but Microsoft uses DRM in their extensions to prevent them from running with non-proprietary builds [1]. Pylance, their Python LSP, is one notable example [2]. Their earlier Python LSP was open source, but the community forks have lost a lot of the wind in their sails because such a large portion of developers use VC Code without realizing or caring that the LSP is DRM-laden…
Comment linking /blog/2021-12-20-rce-in-visual-studio-codes-remote-wsl-for-fun-and-negative-profit/
on “VSCodium – Libre Open Source Software Binaries of VS Code”Submitted Knee Deep in tree-sitter Queries as a story · 2 points
HN discussionPyright was designed by Microsoft to serve as the core of a proprietary[1], DRM-locked[2,3] Python language server, yes. [1] https://github.com/microsoft/pylance-release/issues/4 [2] https://github.com/microsoft/pylance-release/issues/746 [3] https://parsiya.net/blog/2021-12-20-rce-in-visual-studio-cod...
Comment linking /blog/2021-12-20-rce-in-visual-studio-codes-remote-wsl-for-fun-and-negative-profit/
on “Pyright: Static Type Checker for Python”Submitted Thick Client Proxying – How HTTP(s) Proxies Work (2016) as a story · 2 points
HN discussionSubmitted Brain the Size of a Planet: Are LLMs Thonking Too Hard? as a story · 1 points
HN discussionSubmitted WTF Is – AI-Native SAST? as a story · 1 points
HN discussion
