7 ms·
> Timeline > Date reported: 8/24/2022 > Date fixed: 10/11/2022 > Date disclosed: 11/22/2022
by noizejoy 4y ago
> Timeline
> Date reported: 8/24/2022
> Date fixed: 10/11/2022
> Date disclosed: 11/22/2022
- david_allison 4y agoFixed >= 1.73.0 Unsure if it was backported.
- tonny747 4y agoYeah that confused me as well, the affected versions don't line up with the patched version either. I think it was fixed in 1.71.1 as per https://github.com/microsoft/vscode/security/advisories/GHSA-q6rv-h25q-6pj6 https://github.com/microsoft/vscode/security/advisories/GHSA...
- Gigachad 4y agoWeird that Google posted the dates in that format rather than something more universal
- sbierwagen 4y agoIt's an American company, so they used the American date format. Only the middle date is ambiguous anyway.
- Gigachad 4y agoGoogle is a global company and this is a message targeting VS code users who are global as well.
- daemoens 4y agoGood luck getting people to change the way they write dates, no matter how terrible it is.
- runlevel1 4y agoISO 8601 is pretty common amongst the engineers I've worked with. Odds are they didn't grow up with it unless they're from China or a handful of other countries that primarily use YYYYMMDD.
- weberer 4y agoIf you give people a good reason, they'll actually care. "Use YYYY-MM-DD as it allows us to sort by date in the filesystem" is a great reason. On the other hand, bickering about DD-MM-YYYY vs MM-DD-YYYY because "that's how it is in my country" just makes me roll my eyes.
- cowmoo728 4y agoI work at google and frequently collaborate with people from Germany, Australia, Japan, Taiwan, and the US. I always use YYYY-MM-DD in docs and emails to make sure everyone understands. It's still somewhat common to see mixups between the Americans and everyone else around MM/DD and DD/MM though.
- nonethewiser 4y agoWell they are definitely American. Their reach is global, sure. That makes the rest of the world subject to their Americanness.
- chadlavi 4y agoI work at an American company and we use a reasonable date format in technical writing anyway. It's not really an excuse.
- gregmac 4y ago"This date format works for almost 61% of the year" isn't a great selling point.
- dangond 4y agoThis date format works for just as much of the year as DD/MM/YYYY though, and is just as ambiguous as the other format is if you don't know who the author is.
- 3np 4y agoSure. Which is why a non-ambiguous format would be preferred, like the ISO standard YYYY-MM-DD.
- thewataccount 4y agoWhich is also nice and sortable
- andreareina 4y agoWhich is why if I have to write a date in non-big-endian order I try to spell the month out, e.g. 07 Dec 2022
- sebazzz 4y agoThe DD-MM-YYYY format is often used with dashes instead of slashes.
- paulmooreparks 4y agoI work with lots of geographically dispersed and culturally diverse teams. The rule I always enforce is to spell (or abbreviate) the month in all dates. The other numbers tend to work themselves out.
- woodruffw 4y agoIt's a free-form text field; there's a very good chance it was an absentminded choice (it's probably how I'd write it, as an American, if I wasn't thinking too hard). The good news is that GitHub Advisories are publicly editable, so you can always suggest an update to this one.
- TillE 4y agoI'm always a little surprised when computery people don't naturally default to YYYY-MM-DD (except when you're filling out paper forms or something). It's unambiguous and always sorts correctly, and doesn't contain any awkward characters. Objectively the best date format.
- macintux 4y agoI was very annoyed when I worked for a global company that used DD-Mon-YYYY, like 01-Apr-2020. Moaned and groaned about how they chose a non-standard format instead of an ISO standard. Of course, I later found out that is a standard format, and I suppose it's easier on non-technical people even if it stinks as a computer guy. Egg on my face.
- bee_rider 4y agoIt is sort of weird that dates aren’t universally parsed user-side according to localization settings, here in year 2768.
- ipaddr 4y agoCompletely agree. yyyy-mm-dd works for sorting, reading and superseeding existing formats.
- skee8383 4y agomonth/day/year makes sense. the way you euro's do it is stupid. when someone asks you "where were you on X date" do you respond with: "Well on the 23rd day of november i was at X place"? LMAO. stop occupying the same universe as me.
- katbyte 4y agoi'll bite - why do you need to write the date the same you say it? two totally different contexts. And it leads to confusion: 11/11/2022 <- what date is that? or how about 02/05/2022? 2022-11-11 is not ambiguous. and then there is sorting. if you have filenames that are in YYYY-MM-DD you get perfect sorting by date. MM/DD/YYYY you do not. and its not just "euros" who do it that way - its basically the entire world outside of the USA.
- yakubin 4y agoI’d drop the “day”, but yes.
- EugeneOZ 4y ago8 billion - USA population = how many people you insulted.
- dang 4y agoHey, could you please stop breaking the site guidelines, such as by calling names ("stupid"), or posting unsubstantive or flamebait comments? You've been doing this repeatedly, and we eventually have to ban such accounts. It's not what this site is for, and destroys what it is for. If you'd please review https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html and stick to the rules when posting here, we'd appreciate it.
- skee8383 4y ago"Conflict is essential to human life, whether between different aspects of oneself, between oneself and the environment, between different individuals or between different groups. It follows that the aim of healthy living is not the direct elimination of conflict, which is possible only by forcible suppression of one or other of its antagonistic components, but the toleration of it—the capacity to bear the tensions of doubt and of unsatisfied need and the willingness to hold judgement in suspense until finer and finer solutions can be discovered which integrate more and more the claims of both sides. It is the psychologist's job to make possible the acceptance of such an idea so that the richness of the varieties of experience, whether within the unit of the single personality or in the wider unit of the group, can come to expression."
- poorgigachad 4y agoSaid the bitter, envious europoor "I'd never want to live in America. I'd much rather make a quarter as much money and live in a cramped pitiful excuse for a home. Free health care!"
- dang 4y agoCan you please not create accounts to break the site guidelines? Doing that will eventually get your main account banned as well. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html
- oefrha 4y agoTangential: Google search date range only accepts MM/DD/YYYY even if you’re on a different version of Google with a different locale. Really lazy if you ask me. Must be confusing to a lot of people, too.
- fomine3 4y agoThis is really frustrating. Its format is not indicated on the form so my natural (in ja-jp) YYYY/MM/DD input interpret as weird date. I never use MM/DD/YYYY format other than this. This is localization 101 problem on big tech's main product.
- jwilk 4y agoFixed timeline: > Date reported: 2022-08-24 > Date fixed: 2022-10-11 > Date disclosed: 2022-11-22
- spatley 4y agohttps://xkcd.com/1179/ https://xkcd.com/1179/