5 ms·
Hey y'all, I made the most prominent fork of this extension "Material Theme (But I Won't Sue You)" The maintainer went off the deep end last year. He pulled th
by theobr 2y ago
Hey y'all, I made the most prominent fork of this extension "Material Theme (But I Won't Sue You)"
The maintainer went off the deep end last year. He pulled the (originally apache 2) source offline, then started threatening to sue people for hosting alternative versions, including them in other IDEs, etc. Genuine lunatic.
Out of an abundance of precaution, I've taken the following action on my fork:
1. I have the VS Code team auditing it as we speak, and I've given them full permission to immediately pull it from the marketplace & force uninstall it from users if they find ANYTHING malicious.
2. I have audited the code base thoroughly (nothing seemed malicious)
3. I have removed ALL code related to changelogs, analytics, Open Collective and html rendering.
The only thing that seemed slightly concerning was the html + sanity loader for changelogs, so I gutted it entirely. Two PRs removed almost all the deps and over 7,000loc (mostly package-lock)
Repo is here if anyone else would like to audit https://github.com/t3dotgg/vsc-material-but-i-wont-sue-you https://github.com/t3dotgg/vsc-material-but-i-wont-sue-you
- ukFxqnLa2sBSBf6 2y ago[flagged]
- Apfel 2y agoHe's being as helpful as possible, there's no need to go hard on his language like this.
- ukFxqnLa2sBSBf6 2y agoI don’t think went that hard though? I was just pointing out the discrepancy between what they said and what they mean. Not everyone might know that the marketplace doesn’t need you permission to remove your extensions.
- WithinReason 2y agoI don't think they need his cooperation either
- oneeyedpigeon 2y agoMaybe "blessing" is more appropriate, but this is really splitting hairs.
- theobr 2y agoMy haters live in a different dimension of hair splitting, it's honestly kind of unreal
- theobr 2y agoThey don't need it. They offered to "notify me before any action is taken" and I politely declined - explicitly telling them to IMMEDIATELY take it down if they find anything at all
- GlacierFox 2y ago[flagged]
- ukFxqnLa2sBSBf6 2y agoLikewise
- GlacierFox 2y agohttps://www.mikeleake.net/wp-content/uploads/2023/01/DpQ9YJl.png https://www.mikeleake.net/wp-content/uploads/2023/01/DpQ9YJl...
- ukFxqnLa2sBSBf6 2y agoFeeling insecure today?
- GlacierFox 2y agoCome on. You can think of something better to say than that I'm sure of it. That's a Reddit level response...
- ukFxqnLa2sBSBf6 2y agoLikewise
- GlacierFox 2y agolIkEwIse
- ukFxqnLa2sBSBf6 2y agoNever beating the insecurity allegations are you? I don’t know what I did to trigger you but this whole conversation is really sad. The “Reddit level insult” projection is extra sad since I come to this site over Reddit to get away from people like you. In my personal life I have a lot of health issues (mostly autoimmune diseases) that cause me a lot of pain through out the day. It’s inescapable too so its really hard to cope. Sometimes it’s tolerable other times I’m in a black hole of pain and suffering. But it’s actually heart warming to know despite all my struggles that I’ll never be even half as lonely and miserable as you. Seriously, grow up.
- fatata123 2y ago[dead]
- zelphirkalt 2y agoTo me it seems ridiculous, that a theme could even accumulate such things as analytics and even lots of dependencies. A theme is usually something self-contained. And even more ridiculous, that anyone can, as you write, "force uninstall" anything from my machine. So glad I am not a VS Code user. It seems all the typical corporate BS is happening with its marketplace and plugins.
- qbane 2y agoIf one can "force uninstall" for safety, then it implies that automatic upgrading an extension with the user's consent is unsafe at the first place.
- Cthulhu_ 2y agoIt is, but that's the reality of today - auto-updates, "evergreen" releases. This was popularised by Chrome, and IMO fixed a LOT of headaches and allowed for much faster and more agile release cycles - the reality before was that a company like Microsoft would have to provide support for older versions of their software for X years and deal with the fallout of security issues with remaining older versions. (Web) developers had to be careful about adopting newer features because X% of their user base would still be on older versions of the runtime, leading to the invention of transpilers and the start of what is still a very complicated system in web front-end world.
- account42 2y agoIt doesn't fix any headaches it just outsources them to the users who get surprise breakages of their workflow in the middle of an important project.
- qbane 2y ago* without the user's consent
- bmicraft 2y agoTry Qt themes, they're binaries compiled from C++ code :)
- c048 2y agoThank you
- deleted 2y ago[deleted]
- thatgerhard 2y agothank you!
- notwhereyouare 2y agohow is there not a single screenshot of what it looks like either in the repo or on the marketplace page? Or did I just miss them?
- drywipes 2y agoit's ugly, don't worry. however, I found this from the malware creator's website itself: https://framerusercontent.com/images/G17CYe9tTL2GP1Rw4mUI8YCLRyE.png?scale-down-to=1024 https://framerusercontent.com/images/G17CYe9tTL2GP1Rw4mUI8YC...