4 ms·
If only the company behind VSCode, the company behind NPM and the company behind GitHub could get together and figure out a solution to this.
by psadauskas 6mo ago
If only the company behind VSCode, the company behind NPM and the company behind GitHub could get together and figure out a solution to this.
- notnmeyer 6mo agoi mean, then you say it like that…
- midtake 6mo agoMicrosoft is the inverse hand of Midas, turns everything into shit.
- dbalatero 6mo agoMierdas, as they say.
- bhadass 6mo agothese days it's just Microslop
- pixl97 6mo agoWith $101 billion in profit last year I wish I could turn things into $hit as well as they do.
- andrei_says_ 6mo agoYou could, with a large enough captive audience.
- jrgd 6mo agoor a large enough hand
- loloquwowndueo 6mo agoEverything Microsoft makes sucks. If they decided to make vacuum cleaners though, they wouldn’t suck, they would blow.
- lysace 6mo agoJust five years ago this opinion was heresy on HN. Those of us who still remembered their behavior in the 80s/90s were belittled. "They have changed, gramps. This really smart Satya Nadella is CEO. They are the good guys now. Don't be so bitter over old stuff like systematic use of illegal tactics to attempt to kill all of its competitors including Linux." Also: Note that the headline undersells the news dramatically. The article begins with: "GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension."
- cwnyth 6mo agoPretty sure that was astroturfing.
- lysace 6mo agoI always wondered what the division of pro-MS astroturfing was betweeen: a) Waggener Edstrom (now: WE Communications) or similar b) Microsoft employees c) Third-party Microsoft-only developers/IT people (with an obvious vested financial interest)
- loloquwowndueo 6mo agoWell the vacuum cleaner joke is very old, was true then, is true now, has continued to be true despite some people having the wool pulled over their eyes and thinking that Microsoft was no longer the enemy at some point. They have always been the enemy. Stay on your toes, don’t let them in.
- ozim 6mo agoIt is also company behind NuGet. Guess what they did a year ago. They removed 700 or so packages from NuGet proactively but those turned out to be false positives. It is hard to do the right things.
- deleted 6mo ago[deleted]
- stogot 6mo agoIt is hard for Microsoft to do the right things* FTFY
- hedora 6mo agoIn fairness, there was a time when I was unable to have a computer sort search results so the default hit was the plugin with 1000x more downloads than all the others combined.
- ozim 6mo agoContinued devils advocate. It is hard to do right things at their scale and when you do the right thing other division might actively work against you. There was this „how companies work” image where MSFT was each division pointing guns at each other.
- lacker 6mo agoPerfectly demonstrating the truth of the "Microsoft org chart" cartoon. https://bonkersworld.net/organizational-charts https://bonkersworld.net/organizational-charts
- BowBun 6mo agoI've seen this a million times, but aren't the Amazon and Apple ones kinda the same, just differently shaped?
- danielheath 6mo agoOne has 1:2 fanout, the other has 1:50 fanout.
- matkoniecz 6mo agoAlso, Apple has master micromanager overriding managers.
- dlcarrier 6mo agoAt first I though the Apple one had a half-dozen departments actually coordinating on something, but then I took a closer look and realized it's just more micromanagement.
- stingraycharles 6mo agoI think the chart is still from the Steve Jobs era, who definitely was known to be a micromanager.
- bgro 6mo agoThere’s an interview with someone talking about Steve having an extreme melt down rage about the header not being technically centered in one spot on the Apple page. I want to see his reaction trying to type a message on the iPhone keyboard from anytime in the past 7 years. Or navigate the random nonsensical grouping of stuff in settings that got so out of control they added a search bar or watch a pip video or really use anything. Every feature has some sloppy problem. It used to be excusable as nobody else was trying and they’d be working to fix it. Now they just add a feature that’s sub par to things already out there, no innovation, and then it feels sloppy. Most things just don’t feel good to use down to the size and weight of phones now. Rather than fix the problem Apple just keeps copying the homework and claiming they can’t fix perfect. Steve would be punching holes in the wall. Probably would stomp a hole through the floor to strangle the keyboard team
- sieabahlpark 6mo ago[dead]
- getpokedagain 6mo agoNot trolling here but these things are by design cesspools ready for compromise. Any fully open ecosystem where contributions are not strictly reviewed is open to this problem. If you don't like it, don't use editor extensions and use a well audited editor. If you want to use extensions or node packages or pypi packages without doing a detailed review you're accumulating technical debt. You're assuming a risk in order to ship rapidly. You can either pay that down at some point under control, or bear the interest when it comes due.
- LiamPowell 6mo agoExtensions never had to be given unsandboxed access to everything. That's a choice that they actively made.
- wutwutwat 6mo agoits easy to complain, words are cheap. fork it and change it if you don't like it
- antiframe 6mo agoIt's easy to wave a magic wand and have one developer do better than a corporation of tens of thousands. There is a reason I don't use Microsoft products: I can't do it myself and do won't do it for me.
- lkjdsklf 6mo agoThere is no editor that sandboxes extensions as described. Emacs, vim/nvim, intellij, etc… pretty much all vulnerable to such an attack Reality is most devs wouldn’t be satisfied with the limitations proper sandboxing would create.
- jurgenburgen 6mo agoThen you lose access to the VSCode marketplace which kind of defeats the purpose.
- guiambros 6mo agoWell, it certainly wasn't for lack of warning about the glaring risks... https://github.com/microsoft/vscode/issues/52116 https://github.com/microsoft/vscode/issues/52116
- dmix 6mo agoThat is a very well written proposal, I wish someone wrote that sort of ticket for my software projects