VSCode's SSH Agent Is Bananas
Thomas Ptacek details how VSCode Remote SSH installs a persistent WebSocket agent with filesystem, file-editing, and shell access, resembling remote-access tooling.
A Fly.io blog post by Thomas Ptacek examines how VSCode's remote SSH editing works: it stages a Bash snippet that downloads a full agent including a bundled Node binary onto the remote host. The agent communicates with the VSCode frontend over a port-forwarded WebSockets connection and can browse the filesystem, edit arbitrary files, spawn shell PTY processes, and persist itself. Ptacek warns against allowing VSCode remote editing on shared dev servers or during production incidents, noting the design resembles remote-access tooling.
40