[GH-ISSUE #3545] vscode: need help blocking spying #2227

Closed
opened 2026-05-05 08:54:54 -06:00 by gitea-mirror · 8 comments
Owner

Originally created by @medmedin2014 on GitHub (Jul 24, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3545

I'm new to firejail, can anyone please help me find a strict profile that can stop VScode (with C# extension installed and using dotnet core) from connecting to internet and sent collected data, because even if I disable all telemetry/upgrade options and disabled extensions upgrades I still see established connections from the editor to the outside.
I know this is not a bug but I couldn't find any clear/reliable procedure to do it.

Originally created by @medmedin2014 on GitHub (Jul 24, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3545 I'm new to firejail, can anyone please help me find a strict profile that can stop VScode (with C# extension installed and using dotnet core) from connecting to internet and sent collected data, because even if I disable all telemetry/upgrade options and disabled extensions upgrades I still see established connections from the editor to the outside. I know this is not a bug but I couldn't find any clear/reliable procedure to do it.
gitea-mirror 2026-05-05 08:54:54 -06:00
  • closed this issue
  • added the
    question
    label
Author
Owner

@rusty-snake commented on GitHub (Jul 24, 2020):

https://github.com/netblue30/firejail/wiki/Frequently-Asked-Questions#how-do-i-run-vlc-in-a-sandbox-without-network-access

So just add net none to code.local (not sure if code or vscodium or code-oss is used by you, but code.local should cover all)

mkdir -p ~/.config/firejail
echo "net none" >> ~/.config/firejail/code.local
<!-- gh-comment-id:663495113 --> @rusty-snake commented on GitHub (Jul 24, 2020): https://github.com/netblue30/firejail/wiki/Frequently-Asked-Questions#how-do-i-run-vlc-in-a-sandbox-without-network-access So just add `net none` to code.local (not sure if code or vscodium or code-oss is used by you, but code.local should cover all) ``` mkdir -p ~/.config/firejail echo "net none" >> ~/.config/firejail/code.local ``` ```
Author
Owner

@medmedin2014 commented on GitHub (Jul 24, 2020):

@rusty-snake Thanks for your kind and useful reply, I applied the modification and now I'm monitoring the editor. I really don't like the obsession of Microsoft to implement spying tools in every software they create. Thankfully we have a great tools like Firejail and Linux to avoid them from logging our privacy on internet.

<!-- gh-comment-id:663550847 --> @medmedin2014 commented on GitHub (Jul 24, 2020): @rusty-snake Thanks for your kind and useful reply, I applied the modification and now I'm monitoring the editor. I really don't like the obsession of Microsoft to implement spying tools in every software they create. Thankfully we have a great tools like Firejail and Linux to avoid them from logging our privacy on internet.
Author
Owner

@rusty-snake commented on GitHub (Jul 24, 2020):

Established connections must not be spying, the can also be update.

<!-- gh-comment-id:663553381 --> @rusty-snake commented on GitHub (Jul 24, 2020): Established connections must not be spying, the can also be update.
Author
Owner

@bbhtt commented on GitHub (Jul 24, 2020):

@ med ... Take a look at issue 54354 on their repo and the linked issues therein,if you haven't.

<!-- gh-comment-id:663630359 --> @bbhtt commented on GitHub (Jul 24, 2020): @ med ... Take a look at issue 54354 on their repo and the linked issues therein,if you haven't.
Author
Owner

@SkewedZeppelin commented on GitHub (Jul 24, 2020):

You can always use another editor/IDE :)

<!-- gh-comment-id:663648031 --> @SkewedZeppelin commented on GitHub (Jul 24, 2020): You can always use another editor/IDE :)
Author
Owner

@medmedin2014 commented on GitHub (Jul 24, 2020):

@SkewedZeppelin The problem for us who want to debug C# code running on dotnet core on Linux, there is no solid/better alternative other than VSCode.

<!-- gh-comment-id:663652997 --> @medmedin2014 commented on GitHub (Jul 24, 2020): @SkewedZeppelin The problem for us who want to debug C# code running on dotnet core on Linux, there is no solid/better alternative other than VSCode.
Author
Owner

@medmedin2014 commented on GitHub (Jul 24, 2020):

@kortewegdevries Already done, but there is other parts not known (or cannot be controlled) that leak and sent data to M$, I suspect the C# extension created by M$ and which provide their property debugger for C# language. And there are also their dotnet core runtime which requires setting DOTNET_CLI_TELEMETRY_OPTOUT environment variable to 1 to disable the telemetry, which I suspect if it's completely disabled.

<!-- gh-comment-id:663655540 --> @medmedin2014 commented on GitHub (Jul 24, 2020): @kortewegdevries Already done, but there is other parts not known (or cannot be controlled) that leak and sent data to M$, I suspect the C# extension created by M$ and which provide their property debugger for C# language. And there are also their dotnet core runtime which requires setting DOTNET_CLI_TELEMETRY_OPTOUT environment variable to 1 to disable the telemetry, which I suspect if it's completely disabled.
Author
Owner

@Fred-Barclay commented on GitHub (Jul 25, 2020):

Side note: I personally don't mind a little bit of telemetry going back to MS because I believe VS Code keeps improving because of it... but definitely I'd recommend you look at vscodium/code-oss! I believe you can easily turn off all potential monitoring with these...

<!-- gh-comment-id:663793708 --> @Fred-Barclay commented on GitHub (Jul 25, 2020): Side note: I personally don't mind a little bit of telemetry going back to MS because I believe VS Code keeps improving because of it... but definitely I'd recommend you look at vscodium/code-oss! I believe you can easily turn off all potential monitoring with these...
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2227
No description provided.