Live data from Hacker News

Threat actors expand abuse of Microsoft Visual Studio Code

jamf.com

1–10 of 306 posts

Re: Threat actors expand abuse of Microsoft Visual Studio Code

#2
Coming from the perspective of an eclipse fan, why is VS code the defacto answer nowadays?

Im forced to use vs code (so biased), but everything seems worse than eclipse, plus these repeated security issues from malware laced projects.

Theres been several posts about infected projects by fake recruiters here in the last year or two.

Im guessing the answer is probably Java is why eclipse is out of favor.

Re: Threat actors expand abuse of Microsoft Visual Studio Code

#3

Coming from the perspective of an eclipse fan, why is VS code the defacto answer nowadays? Im forced to use vs code (so biased), but everything seems worse than eclipse, plus these repeated security issues from malware laced projects. Theres been several posts about infected projects by fake recruiters here in the last year or two. Im guessing the answer is probably Java is why eclipse is out of favor.

Wild. I would quit my job and start selling jam at the Farmer’s Market before I went back to Eclipse! :)

Re: Threat actors expand abuse of Microsoft Visual Studio Code

#4

Coming from the perspective of an eclipse fan, why is VS code the defacto answer nowadays? Im forced to use vs code (so biased), but everything seems worse than eclipse, plus these repeated security issues from malware laced projects. Theres been several posts about infected projects by fake recruiters here in the last year or two. Im guessing the answer is probably Java is why eclipse is out of favor.

  > everything seems worse than eclipse
I would say the answer is that's not the general perception of the software. I'm personally migrating out of VSCode, because having to use the OpenVSX registry to have open-source builds makes me mad (I've since migrated to Zed for now, since I've never adapted well to neovim nor emacs).

In general, I believe most people see VSCode as "good enough". Maybe not the best text editor, but it's good enough at everything it does and extensible enough to the point that there's really no point to go for anything else unless you have a really good reason to.

   > Im guessing the answer is probably Java is why eclipse is out of favor.
My previous answer is thinking about editors in general. But in the case of Eclipse I'd say you're right LOL.

Re: Threat actors expand abuse of Microsoft Visual Studio Code

#5

Coming from the perspective of an eclipse fan, why is VS code the defacto answer nowadays? Im forced to use vs code (so biased), but everything seems worse than eclipse, plus these repeated security issues from malware laced projects. Theres been several posts about infected projects by fake recruiters here in the last year or two. Im guessing the answer is probably Java is why eclipse is out of favor.

why is VS code the defacto answer nowaday?

  1. It's free
  2. A million plug-ins
Personally, I don't use it because it's so dog slow.

Re: Threat actors expand abuse of Microsoft Visual Studio Code

#6

Coming from the perspective of an eclipse fan, why is VS code the defacto answer nowadays? Im forced to use vs code (so biased), but everything seems worse than eclipse, plus these repeated security issues from malware laced projects. Theres been several posts about infected projects by fake recruiters here in the last year or two. Im guessing the answer is probably Java is why eclipse is out of favor.

Seems very odd to me that someplace would force the use of a particular development tool. I've seen it only one time while interviewing, where they wanted everyone to have identical setups so they could easily hop onto each others computers when needed... it was weird and I took it as a red flag and didn't follow through them them.

Re: Threat actors expand abuse of Microsoft Visual Studio Code

#7
It is scary that a text editor can run hidden code just by opening a folder. We traded our safety for convenience and now we are paying the price. Users will always click the button to trust a file if they think it helps them work faster. We cannot blame them when the software design makes it so easy to make a mistake.

Re: Threat actors expand abuse of Microsoft Visual Studio Code

#8

It is scary that a text editor can run hidden code just by opening a folder. We traded our safety for convenience and now we are paying the price. Users will always click the button to trust a file if they think it helps them work faster. We cannot blame them when the software design makes it so easy to make a mistake.

Doesn't it ask you if you trust a folder when you open it?

Re: Threat actors expand abuse of Microsoft Visual Studio Code

#9

Coming from the perspective of an eclipse fan, why is VS code the defacto answer nowadays? Im forced to use vs code (so biased), but everything seems worse than eclipse, plus these repeated security issues from malware laced projects. Theres been several posts about infected projects by fake recruiters here in the last year or two. Im guessing the answer is probably Java is why eclipse is out of favor.

why is VS code the defacto answer nowaday? 1. It's free 2. A million plug-ins Personally, I don't use it because it's so dog slow.

I have noticed that Antigravity is lightening fast, wonder what magic they are using?

Re: Threat actors expand abuse of Microsoft Visual Studio Code

#10

Coming from the perspective of an eclipse fan, why is VS code the defacto answer nowadays? Im forced to use vs code (so biased), but everything seems worse than eclipse, plus these repeated security issues from malware laced projects. Theres been several posts about infected projects by fake recruiters here in the last year or two. Im guessing the answer is probably Java is why eclipse is out of favor.

Seems very odd to me that someplace would force the use of a particular development tool. I've seen it only one time while interviewing, where they wanted everyone to have identical setups so they could easily hop onto each others computers when needed... it was weird and I took it as a red flag and didn't follow through them them.

That is a massive red flag to me too. They are basically saying "you are identical to everyone else, and easily replaced."
Post reply on HN