Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

WebStorm and Rider Are Now Free for Non-Commercial Use

blog.jetbrains.com

Post reply on HN
Print view View original

31–40 of 64 posts

Re: WebStorm and Rider Are Now Free for Non-Commercial Use

#31

Post by OutOfHere »

lolinder wrote: post #28
OutOfHere wrote: post #23

Earlier quoted context omitted.

> security isn't one of them Oh but it is. If there is harmful data-stealing software running in the container, it will remain isolated to the container. And if the kernel is shared with the host, that's a read-only share.

I think you're missing my point: you are saying that it is one of the benefits, but they don't because it isn't one. Containers are not a security solution for running untrusted code. You saying they are does not make it so. > And if the kernel is shared with the host, that's a read-only share. No, it's not, the kernel is reading and writing files constantly for the container. A bug in the kernel could be exploited t…

There is no such thing as perfect security. Partial security is much better than none at all. Containers go a long way in this regard. All code is untrusted.

Re: WebStorm and Rider Are Now Free for Non-Commercial Use

#32

Post by OutOfHere »

anstarovoyt wrote: post #15
OutOfHere wrote: post #10

JetBrains IDEs are better than VSCode, but due to Copilot integration in VSCode, I moved away from JetBrains. I don't see myself going back to JetBrains. Secondly, the free JetBrains IDEs also lack devcontainer support which is readily present in VSCode. To not use devcontainer is a substantial security hazard.

>Secondly, the free JetBrains IDEs also lack devcontainer support Actually, there is a significant difference between the community versions (e.g. for PyCharm) and the versions available for non-commercial use. The latter are full versions of the products without any reduced functionality, whereas the community editions have certain features trimmed.

JetBrains simply is uncompetitive. It doesn't make sense to have to pay for an important feature (container integration via devcontainer or docker) that is already free in a competing IDE (VSCode).

Re: WebStorm and Rider Are Now Free for Non-Commercial Use

#33

Post by lolinder »

OutOfHere wrote: post #31
lolinder wrote: post #28

Earlier quoted context omitted.

I think you're missing my point: you are saying that it is one of the benefits, but they don't because it isn't one. Containers are not a security solution for running untrusted code. You saying they are does not make it so. > And if the kernel is shared with the host, that's a read-only share. No, it's not, the kernel is reading and writing files constantly for the container. A bug in the kernel could be exploited t…

There is no such thing as perfect security. Partial security is much better than none at all. Containers go a long way in this regard. All code is untrusted.

> Partial security is much better than none at all.

Only if you don't let down your guard because it's "secure". Again, there's a reason why they don't claim it's secure and everyone says to not treat containers as a sandbox.

Re: WebStorm and Rider Are Now Free for Non-Commercial Use

#34

Post by OutOfHere »

lolinder wrote: post #33
OutOfHere wrote: post #31

Earlier quoted context omitted.

There is no such thing as perfect security. Partial security is much better than none at all. Containers go a long way in this regard. All code is untrusted.

> Partial security is much better than none at all. Only if you don't let down your guard because it's "secure". Again, there's a reason why they don't claim it's secure and everyone says to not treat containers as a sandbox.

The only people here who are letting their guard down are ones who're not even using a container/jail/VM for each project. JetBrains encourages this by not providing the container integration features for free.

Re: WebStorm and Rider Are Now Free for Non-Commercial Use

#35

Post by lolinder »

OutOfHere wrote: post #34
lolinder wrote: post #33

Earlier quoted context omitted.

> Partial security is much better than none at all. Only if you don't let down your guard because it's "secure". Again, there's a reason why they don't claim it's secure and everyone says to not treat containers as a sandbox.

The only people here who are letting their guard down are ones who're not even using a container/jail/VM for each project. JetBrains encourages this by not providing the container integration features for free.

We're going in circles and I'm done engaging with you.

Re: WebStorm and Rider Are Now Free for Non-Commercial Use

#36

Post by thatfunkymunki »

abhijeetpbodas wrote: post #3

Specifically worth noting: > It’s important to note that, if you’re using a non-commercial license, you cannot opt out of the collection of anonymous usage statistics.

https://intellij-support.jetbrains.com/hc/en-us/community/po...

not just anonymous statistics, i presume

Re: WebStorm and Rider Are Now Free for Non-Commercial Use

#37

Post by OutOfHere »

lolinder wrote: post #35
OutOfHere wrote: post #34

Earlier quoted context omitted.

The only people here who are letting their guard down are ones who're not even using a container/jail/VM for each project. JetBrains encourages this by not providing the container integration features for free.

We're going in circles and I'm done engaging with you.

[flagged]

Re: WebStorm and Rider Are Now Free for Non-Commercial Use

#38

Post by Larrikin »

OutOfHere wrote: post #10

JetBrains IDEs are better than VSCode, but due to Copilot integration in VSCode, I moved away from JetBrains. I don't see myself going back to JetBrains. Secondly, the free JetBrains IDEs also lack devcontainer support which is readily present in VSCode. To not use devcontainer is a substantial security hazard.

Copilot works just fine in JetBrains? Microsoft has an official plug-in.

Re: WebStorm and Rider Are Now Free for Non-Commercial Use

#39

Post by acdha »

fragmede wrote: post #27
OutOfHere wrote: post #23

Earlier quoted context omitted.

> security isn't one of them Oh but it is. If there is harmful data-stealing software running in the container, it will remain isolated to the container. And if the kernel is shared with the host, that's a read-only share.

> remain isolated to the container. Assuming the code that implements the containerization is 100% bug free and there are no container escapes. I would not bet my user's safety purely on that assumption.

This is as useful as saying that seat belts do not make you safer because people still die in crashes. Containers are not perfect but if you’re starting from the conventional position where you’re one wrong package install away from an attacker having arbitrary access to your account and data, they’re a significant immediate improvement and a good foundation for further improvement.

Re: WebStorm and Rider Are Now Free for Non-Commercial Use

#40

Post by [deleted] »

Larrikin wrote: post #38
OutOfHere wrote: post #10

JetBrains IDEs are better than VSCode, but due to Copilot integration in VSCode, I moved away from JetBrains. I don't see myself going back to JetBrains. Secondly, the free JetBrains IDEs also lack devcontainer support which is readily present in VSCode. To not use devcontainer is a substantial security hazard.

Copilot works just fine in JetBrains? Microsoft has an official plug-in.

[deleted]
Post reply on HN