5 ms·

I don't get why having a modal for each tool asking for consent is too hard.

by coolgoose 2y ago

cedws 2y ago
I don’t want that. Popups are one of the reasons I stopped using VSCode. They drive me nuts. Just let me write code.
- usr1106 2y ago
  Just let others silently run code on my computer? Sorry, but not for me.
  - jeroenhd 2y ago
    Isn't that the point of downloading an editor in the first place? Not having to write your own editor code?
    - usr1106 2y ago
      The point was silently.
- brabel 2y ago
  It annoys me a lot as well, though it took me a couple of minutes to turn off the popups. Once you've done that, it's similar to emacs for me, everything has to be evoked via a shortcut (or Action Palette which works very well in VS Code). The shortcut to show "help" or "docs" is Cmd+K Cmd+I, by the way - easy to type and remember...
- switch007 2y ago
  The popups in VScode seem explicitly intended to annoy. Why is showing the release log the default for so many things? Is the average user really going to read them? It makes you wonder what they are doing with all that telemetry
whazor 2y ago
Because people want a fast out of the box editing experience. Not clicking yes for every language server. But what they should have is a CDN with their own extensions and verified binaries. This way they can ship new versions of extensions without bumping their editor version.
- mhd 2y ago
  > Not clicking yes for every language server. How many language servers are we talking about here for the average dev? Three?
  - theultdev 2y ago
    Yes, but you would have it for each time you opened a new workspace. The only point of this would be if you didn't want to download the language server for untrusted code. I think what people really want is workspace location permissions...
    - Ygg2 2y ago
      Wait, what. Why should you keep downloading Node per workspace? If you have one installed already?
      - theultdev 2y ago
        Not downloading, but enabling. The downloading of Node isn't really the issue that people are trying to make it. The real problem is "running" the language server on untrusted code. That's where there should be a confirm dialog. But it's a separate issue about workspace permissions. That's the only vulnerability here and it exists on at least one some level in all editors in language servers. (VSCode's workspace permissions aren't that secure)
- herrkanin 2y ago
  The versions should generally match what's specified in the user's package.json. It doesn't make much sense then to have a separate registry.
diego_sandoval 2y ago
Because it would turn into the popup fest that is vscode.
- loa_in_ 2y ago
  All it takes is a "yes to all this session" button, which is way better than just doing it quietly.
- chillfox 2y ago
  I can't remember the last time I saw a popup in vscode, maybe last year.
  - DangitBobby 2y ago
    Do you use it?
    - chillfox 2y ago
      Every day. Guess I just configured it differently to how most people do it.
      - DangitBobby 2y ago
        I see a pop up for an update or extension that isn't working anymore pretty much every time I open it.
        chillfox 2y ago
        Well, that sucks. You should probably use a different editor that works better for you.
consp 2y ago
[flagged]
- WesolyKubeczek 2y ago
  Does it mean that it’s excruciatingly difficult to write a yes/no prompt in Rust? You can make an editor, but not a consent prompt…
  - wolvesechoes 2y ago
    There are more game engines written in Rust than games written in Rust. So maybe there are more GUI libraries than dialog windows written in Rust as well.
    - timeon 2y ago
      The referenced issue has nothing to do with Rust. One would have to dug deeper and not relay on random comment to figure out. So I'm not expecting you to do it when even content of your comment is bit lazy copy-paste. But even so, without checking the actual Github, it was already explained here [0], before you have posted. [0] https://news.ycombinator.com/item?id=40903577 https://news.ycombinator.com/item?id=40903577
- IshKebab 2y ago
  That's nothing to do with having a dialog to ask for each too. That's talking about the amount of work it would be to rewrite all these tools themselves so it was first party Rust code.
- lucianbr 2y ago
  "Action would be too difficult / we don't like it" =/= "there is no action available". This is just refusing to take responsibility for their decision. "We don't feel like doing it" is the truth, and it would be best to state it plainly. Of course there is no obligation to do otherwise, which makes it strange to play with words.
- Ygg2 2y ago

I don't get why having a modal for each tool asking for consent is too hard.

cedws 2y ago

I don’t want that. Popups are one of the reasons I stopped using VSCode. They drive me nuts. Just let me write code.

usr1106 2y ago
Just let others silently run code on my computer? Sorry, but not for me.
- jeroenhd 2y ago
  Isn't that the point of downloading an editor in the first place? Not having to write your own editor code?
  - usr1106 2y ago
    The point was silently.
brabel 2y ago
It annoys me a lot as well, though it took me a couple of minutes to turn off the popups. Once you've done that, it's similar to emacs for me, everything has to be evoked via a shortcut (or Action Palette which works very well in VS Code). The shortcut to show "help" or "docs" is Cmd+K Cmd+I, by the way - easy to type and remember...
switch007 2y ago
The popups in VScode seem explicitly intended to annoy. Why is showing the release log the default for so many things? Is the average user really going to read them? It makes you wonder what they are doing with all that telemetry

whazor 2y ago

Because people want a fast out of the box editing experience. Not clicking yes for every language server. But what they should have is a CDN with their own extensions and verified binaries. This way they can ship new versions of extensions without bumping their editor version.

mhd 2y ago
> Not clicking yes for every language server. How many language servers are we talking about here for the average dev? Three?
- theultdev 2y ago
  Yes, but you would have it for each time you opened a new workspace. The only point of this would be if you didn't want to download the language server for untrusted code. I think what people really want is workspace location permissions...
  - Ygg2 2y ago
    Wait, what. Why should you keep downloading Node per workspace? If you have one installed already?
    - theultdev 2y ago
      Not downloading, but enabling. The downloading of Node isn't really the issue that people are trying to make it. The real problem is "running" the language server on untrusted code. That's where there should be a confirm dialog. But it's a separate issue about workspace permissions. That's the only vulnerability here and it exists on at least one some level in all editors in language servers. (VSCode's workspace permissions aren't that secure)
herrkanin 2y ago
The versions should generally match what's specified in the user's package.json. It doesn't make much sense then to have a separate registry.

diego_sandoval 2y ago

Because it would turn into the popup fest that is vscode.

loa_in_ 2y ago
All it takes is a "yes to all this session" button, which is way better than just doing it quietly.
chillfox 2y ago
I can't remember the last time I saw a popup in vscode, maybe last year.
- DangitBobby 2y ago
  Do you use it?
  - chillfox 2y ago
    Every day. Guess I just configured it differently to how most people do it.
    - DangitBobby 2y ago
      I see a pop up for an update or extension that isn't working anymore pretty much every time I open it.
      - chillfox 2y ago
        Well, that sucks. You should probably use a different editor that works better for you.

consp 2y ago

[flagged]

WesolyKubeczek 2y ago
Does it mean that it’s excruciatingly difficult to write a yes/no prompt in Rust? You can make an editor, but not a consent prompt…
- wolvesechoes 2y ago
  There are more game engines written in Rust than games written in Rust. So maybe there are more GUI libraries than dialog windows written in Rust as well.
  - timeon 2y ago
    The referenced issue has nothing to do with Rust. One would have to dug deeper and not relay on random comment to figure out. So I'm not expecting you to do it when even content of your comment is bit lazy copy-paste. But even so, without checking the actual Github, it was already explained here [0], before you have posted. [0] https://news.ycombinator.com/item?id=40903577 https://news.ycombinator.com/item?id=40903577
IshKebab 2y ago
That's nothing to do with having a dialog to ask for each too. That's talking about the amount of work it would be to rewrite all these tools themselves so it was first party Rust code.
lucianbr 2y ago
"Action would be too difficult / we don't like it" =/= "there is no action available". This is just refusing to take responsibility for their decision. "We don't feel like doing it" is the truth, and it would be best to state it plainly. Of course there is no obligation to do otherwise, which makes it strange to play with words.
Ygg2 2y ago