Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Kite Responds to the Minimap and Autocomplete Issues

kite.com

Post reply on HN
Print view View original

61–70 of 75 posts

Re: Kite Responds to the Minimap and Autocomplete Issues

#61

Post by Grue3 »

rhizome wrote: post #11
holtalanm wrote: post #6

Earlier quoted context omitted.

they didn't. they just had them add _support_ for Kite. It was up to the user to enable it. I'm failing to see the issue here. I mean, yes, their UIs needed work, but they admitted to that mistake and have since fixed it (according to the article). Your comment makes me think this is more of an open-source lynch mob rather than someone looking at this objectively. Company needs users. Plugin has users. Plugin does th…

"Lynch mob?" Really?

There was a guy calling for a communist-style "purging" of anyone involved with this company in the last thread. I think you're underestimating how mad people get about free plugins for their (incredibly bloated and inefficient) code editor.

Re: Kite Responds to the Minimap and Autocomplete Issues

#62

Post by jdiaz5513 »

fooey wrote: post #33
ivanbakel wrote: post #27

An apology that starts with 4 paragraphs of self-congratulation is not a real apology at all. Nothing of the article reads as being genuinely regretful of the strategies taken - it's just sorry for being caught. >Unfortunately, while trying to make programmers’ lives a little less complicated, we instead made them more complicated. Barely an admission of guilt, and even that can't get past without patting themselves…

Buying a popular addon with the express purpose of subverting its original intent for commercial monetization seems like it should be against Atom's TOS This instance is razor thin close to being malware What's to stop the next enterprising company from intentionally uploading all your code to their servers? Modifying your code? Or holding your code hostage? Atom has git support backed in, so how likely is it an addo…

I think what it really means is this:

If I'm the maintainer of an OSS plugin with 3m users, I'd better be _very_ careful about what I do with it, and keep my SSH keys, etc., _safe_. It's a responsibility not to be taken lightly.

Practically speaking, it means you have to be comfortable with knowing you have a (tiny?) chance of being hit with a remote code exploit at any time. Avoiding that means disabling auto update and other such conveniences. Personally, I treat developer computers as untrusted by default.

Re: Kite Responds to the Minimap and Autocomplete Issues

#64

Post by codezero »

emsy wrote: post #50
codezero wrote: post #47

Earlier quoted context omitted.

Picking nits I think you mean adware not malware. I think it's worth making the distinction.

Giving ad networks tracking information of your editor usage and possibly access to the code you're working (which they didn't do, but the original statement was 'close to being malware') on is beyond mere adware.

Adware always had telemetry. But I get your point. Let's call it spyware then if we think companies might use our source as a consequence. I find it highly unlikely but admit it is possible.

Re: Kite Responds to the Minimap and Autocomplete Issues

#65

Post by sboselli »

Not buying it at all.

How does the announcement of Kite Enterprise (twice!!) fit within the supposed "apology"?? It has absolutely nothing to do with either project.

It's ironic actually. Within their "apology" they are doing the EXACT same thing they are apologizing for: sneaking in some more advertising of their products.

This is one disgusting company.

Re: Kite Responds to the Minimap and Autocomplete Issues

#66

Post by davidgerard »

codezero wrote: post #47
fooey wrote: post #33

Earlier quoted context omitted.

Buying a popular addon with the express purpose of subverting its original intent for commercial monetization seems like it should be against Atom's TOS This instance is razor thin close to being malware What's to stop the next enterprising company from intentionally uploading all your code to their servers? Modifying your code? Or holding your code hostage? Atom has git support backed in, so how likely is it an addo…

Picking nits I think you mean adware not malware. I think it's worth making the distinction.

Literally the only distinction is how many lawyers they're packing.

Re: Kite Responds to the Minimap and Autocomplete Issues

#67

Post by davidgerard »

holtalanm wrote: post #60
rhizome wrote: post #49

Earlier quoted context omitted.

You are absolutely passing judgement when you equate the blowback against Kite with extrajudicial (and mostly racist) murder. That you doubled down in your flagged comment instead of acknowledging the (being charitable) hyperbole raises questions about your judgement. No offense. That said, by deed and by words (per their apology) they executed on an "ends justify the means" business model. They wanted more business,…

'equate the blowback against Kite with extrajudicial (and mostly racist) murder' I didn't say anything about race anywhere. way to read between the lines again and attempt to make my original comment look WAY more inflammatory than it actually was. I was more equating it to large groups of people getting up-in-arms and angry without actually taking a step back and looking at the whole situation. To say that is a lync…

> I didn't say anything about race anywhere

"lynch" is a racially-coded word in 2017. Google "lynch racially coded" and check the first few hits. That's the mine you unintentionally stepped on here.

Re: Kite Responds to the Minimap and Autocomplete Issues

#68

Post by thisacctforreal »

conradk wrote: post #53
jdiaz5513 wrote: post #20

At companies like my former employer, developers were given the power and responsibility to vet their own tools. Despite somewhat strict compliance needs we were able to allow junior developers to customize their own IDEs and plugins, since personalization is crucial for productivity. One of those compliance needs was, crucially, that _source code in its full form must not leave the developer's machine except en rout…

We've seen it happen before though: http://www.infoworld.com/article/2929732/open-source-softwar... This problem applies not only to editor plugins but all sorts of things nowadays: npm packages for Node.js devs in particular seem like a great way to get viruses, given how hundreds of dependencies get pulled in, sometimes to save 2 or 3 lines of code. Here is an example in the Node package for Postmark (an email serv…

to be fair with that specific example, they changed from a purpose-built function, to a shell call including (albeit extremely simple) text parsing.

I'd generally prefer not to have the git(1) incantation hanging around in an unrelated function.

Re: Kite Responds to the Minimap and Autocomplete Issues

#69

Post by holtalanm »

davidgerard wrote: post #67
holtalanm wrote: post #60

Earlier quoted context omitted.

'equate the blowback against Kite with extrajudicial (and mostly racist) murder' I didn't say anything about race anywhere. way to read between the lines again and attempt to make my original comment look WAY more inflammatory than it actually was. I was more equating it to large groups of people getting up-in-arms and angry without actually taking a step back and looking at the whole situation. To say that is a lync…

> I didn't say anything about race anywhere "lynch" is a racially-coded word in 2017. Google "lynch racially coded" and check the first few hits. That's the mine you unintentionally stepped on here.

I forgot I lived in 2017, where _literally_ anything can be taken out of context and made into a race issue.

Re: Kite Responds to the Minimap and Autocomplete Issues

#70

Post by conradk »

thisacctforreal wrote: post #68
conradk wrote: post #53

Earlier quoted context omitted.

We've seen it happen before though: http://www.infoworld.com/article/2929732/open-source-softwar... This problem applies not only to editor plugins but all sorts of things nowadays: npm packages for Node.js devs in particular seem like a great way to get viruses, given how hundreds of dependencies get pulled in, sometimes to save 2 or 3 lines of code. Here is an example in the Node package for Postmark (an email serv…

to be fair with that specific example, they changed from a purpose-built function, to a shell call including (albeit extremely simple) text parsing. I'd generally prefer not to have the git(1) incantation hanging around in an unrelated function.

The dependency "git-rev" uses a shell-call too, so this PR doesn't change much apart from removing the dependency itself.

Here's the original code from the "git-rev" package: https://github.com/tblobaum/git-rev/blob/master/index.js

Post reply on HN