Zed Editor automatically downloads binaries and NPM packages without consent • Hacker News Board

Re: Zed Editor automatically downloads binaries and NPM packages without consent

#181

Post by wtetzner » Wed, Jul 10, 2024, 9:43 PM UTC

theultdev wrote: post #160

nrabulinski wrote: post #66

Earlier quoted context omitted.

Then you’d click the „yes and never ask me again” if a prompt about whether you want to download a random binary showed up. But a lot of people wouldn’t want to click that and would either click „no and never ask me again” or vet each case one by one

How are you going to "vet" the language server when it pops up? It's not a "random binary" either, it's a hosted binary for language features coming from the zed developers github release. Even if the binary was compiled on demand when you clicked the button, were you going to go through the entire source of node to verify?

> How are you going to "vet" the language server when it pops up?

You may not vet the source of the language server, but you might want to determine which ones you are willing to trust/take the risk, and which ones you aren't.

Re: Zed Editor automatically downloads binaries and NPM packages without consent

#182

Post by teo_zero » Thu, Jul 11, 2024, 5:26 AM UTC

theultdev wrote: post #7

I don't really see the big deal here. Who wants to approve and configure all of their language servers? If you open a file for that language, is there ever a time you would deny the download? I just don't want a huge amount of popups like VSCode. Also, the binaries are downloaded from their release on github. As long as that is secure I don't see a problem.

> Who wants to approve and configure all of their language servers?

I think you're asking the wrong question. The correct one would be: "who wants to be asked if they want to approve and configure all of their language servers?"

It's not what zed does, it's doing it behind your back!

Re: Zed Editor automatically downloads binaries and NPM packages without consent

#183

Post by james1120000 » Thu, Jul 11, 2024, 1:06 PM UTC

I lost my investment capital and profits trading online, they kept on requesting for extra funds before a withdrawal request can be accepted and processed, in the end, I lost all my money. All efforts to reach out to their customer support desk had declined, I found it very hard to move on. God so kind I followed a broadcast that teaches on how scammed victims can recover their fund through the help of Gavin ray a recovery specialist, I contacted his email provided for consultation, I got feedback after some hours and I was asked to provide all legal details concerning my investment, I did exactly what they instructed me to do without delay, to my greatest surprise I was able to recover my money back including my profit which my capital generated. I said I will not hold this to myself but share it to the public so that all scammed victims can get their funds back. Contact his email:gavinray78@gmail.com or whatsapp +1 352 322 2096