search

SchoofsKelvin / vscode-sshfs

Extension for Visual Studio Code: File system provider using SSH
GNU General Public License v3.0
543 stars 36 forks source link

Security Issue #402

Closed fnkcgxgkgcfu closed 8 months ago

fnkcgxgkgcfu commented 9 months ago

On the Visual Studio Code config.json file the SSH login info is explicitly visible and with no encryption, I want to know why such important info is not hideen?

EXAMPLE

"sshfs.configs": [ { "name": "root", "host": "192.168.1.1", "port": 22, "password": "password", "username": "root" }

colin-r-schultz commented 8 months ago

The configuration page explicitly says that the password is stored in plain text, and it is therefore not recommended to use that option.

Password Password for password-based user authentication. Supports env variables. This gets saved in plaintext! Using prompts or private keys is recommended!

fnkcgxgkgcfu commented 8 months ago

The configuration page explicitly says that the password is stored in plain text, and it is therefore not recommended to use that option.

Password Password for password-based user authentication. Supports env variables. This gets saved in plaintext! Using prompts or private keys is recommended!