Live data from Hacker News

Material Theme has been pulled from VS Code's marketplace

github.com

331–340 of 424 posts

Re: Material Theme has been pulled from VS Code's marketplace

#332

Earlier quoted context omitted.

PSA: every package you install from any package manager from browser extensions to npm/composer etc presents the risk of malware. Because the open source community lacks the financial resources to vet every single version of every package. Demanding this level of security from software provided at no cost that relies on open contributions is wholly unreasonable. If you need that, buy an IDE from a company financially…

> Demanding this level of security from software provided at no cost that relies on open contributions is wholly unreasonable VS Code isn't some kind of hobby project by a couple of dudes on laptops with nothing but the best interests of the community at heart. It's a flagship IDE produced by one of the most valuable tech companies in the world, released for free as a loss leader in service to very specific corporate…

> VS Code isn't some kind of hobby project by a couple of dudes on laptops with nothing but the best interests of the community at heart.

Which is why I'm pretty confident in first party packages and don't install third party plugins from random authors.

Re: Material Theme has been pulled from VS Code's marketplace

#333
post #225

Earlier quoted context omitted.

It's pretty mild, but still offensive in the UK. Your friend was right to believe that much. That everyone thinks it means that? No - the US uses it differently for a region of the body slightly less offensive. It's a bit like spunk, which is also fairly offensive in the UK, and fag, which despite having an offensive meaning in the US, is actually traditionally not offensive here, though the US meaning is known and s…

Remember when fanny packs were a thing?

But people wore them on their front side didn't they? I don't remember people turning them around and preparing them on their butts

Re: Material Theme has been pulled from VS Code's marketplace

#334

Earlier quoted context omitted.

The marketplace isn't operated on a paid contract for vetted extensions. You vet the extensions you use. Most don't, and it's ok. Don't shift the blame and the cost on microsoft though, they don't have to offer it.

Yet Mozilla, for all the flak it gets, isn't paid a dime by its users, but does find resources to vet the most popular extensions. Everything I use is checked by them. Raymond Hill (of ublock fame) wasn't really impressed with how it is performed, but it's still much better than nothing (which is what MS apparently does). VSCode is an IDE in name only, it's a glorified text editor, and pretty mediocre one at that. I…

What functionality or property makes JetBrains' products an IDE while VSCode isn't? Honest question, I've never used any of their products.

Re: Material Theme has been pulled from VS Code's marketplace

#335

Earlier quoted context omitted.

I think effort is irrelevant. Value is what we really look at when deciding what price to pay. It doesn't matter to most people if it took someone a 1000 hours to produce a loaf of bread. They're not going to pay 100x the price of the bread that took 10 hours to produce. Especially, if the products are mostly indistinguishable.

Partially in jest, but have you forgotten about the luxury market?

I think the luxury market proves my point. The perceived value of luxury items is much higher as reflected in the price paid. Although, the cost and effort to produce luxury items is roughly the same as a similar non luxury item.

Re: Material Theme has been pulled from VS Code's marketplace

#336

Earlier quoted context omitted.

So many people who are otherwise functional in society, for whatever reason just can't play well with others when it comes to online communication. This can be true for both software maintainers and users. People can't just leave their emotions at the door and file a bug report or respond to a help request, without including a little personal jab or passive aggressive snipe. Looking at some of those replies to users,…

> So many people who are otherwise functional in society, for whatever reason just can't play well with others when it comes to online communication. So I run a small game that has a couple thousand active users, and part of that is allowing users to chat via written text. The amount of vitriol some users spew just amazes me. If they acted like that in person, I expect they would get punched in the mouth quite often.…

There's a fun little MMO-lite that reminds me of Escape Velocity[0]. Its chat system seems to filter and translate on the fly using some tiny ML models, and I think the guy behind it wrote everything himself.

The interesting thing about his implementation is that seeing e.g. Chinese being replaced in-line as it's translated feels way more amazing than knowing a translation has occurred in the background. He's hidden the time difference between paying for a service or running it yourself behind an animation.

[0] https://store.steampowered.com/app/1717290/Subspace_Discover...

Re: Material Theme has been pulled from VS Code's marketplace

#337
post #112

@dang can you please update the link to the archive link

Usually it's better to put an archive link in the comments, not at the top, so the original domain isn't obscured. I've pinned the archive link to the top now (and detached this subthread from https://news.ycombinator.com/item?id=43181471).

(As throw16180339 said, please email hn@ycombinator.com with these things - that's the only way to be (mostly) sure I'll see it.)

Re: Material Theme has been pulled from VS Code's marketplace

#339
post #323

Earlier quoted context omitted.

You do realize this is Microsoft we're talking about here? Not merely a couple dudes in their bedroom doing this in their spare time? I guarantee you that a non-zero percentage of the code in VSCode was paid for.

Who ever paid to use the extensions marketplace?

I meant on the development side, not that end users paid for anything.

Re: Material Theme has been pulled from VS Code's marketplace

#340

Curiously, someone on reddit noticed suspicious changes in this extension 7 months ago [1]. Obfuscation in open source is usually an extreme red flag. Microsoft really needs to rethink their security model for vs code extensions. It has simply become way too profitable to target given whatever they are doing against it. For every dev they ban 10 will come with new malicious extensions. [1] https://www.reddit.com/r/vs…

Be careful what you wish for. VS Code is maybe the best product Microsoft has ever released, largely because the extension market. If Microsoft polices the marketplace more, you can probably expect VS Code quality to degrade. Here's my argument: More scrutiny of the marketplace will lead to less extensions overall (the scrutiny process will reduce the number of extensions overall as barrier to entry will be increased…

You do not have to police everything, copy what Mozilla is doing: pass the top X extensions through manual audits (including looking at code diffs on every update) and mark them as trusted. Maybe also add a giant warning "this extension may steal your stuff" when installing everything else.
Post reply on HN