4 ms·
If only the company behind VSCode, the company behind NPM and the company behind GitHub could get together and figure out a solution to this.
by psadauskas 4mo ago
If only the company behind VSCode, the company behind NPM and the company behind GitHub could get together and figure out a solution to this.
- notnmeyer 4mo agoi mean, then you say it like that…
- midtake 4mo agoMicrosoft is the inverse hand of Midas, turns everything into shit.
- dbalatero 4mo agoMierdas, as they say.
- bhadass 4mo agothese days it's just Microslop
- pixl97 4mo agoWith $101 billion in profit last year I wish I could turn things into $hit as well as they do.
- andrei_says_ 4mo agoYou could, with a large enough captive audience.
- jrgd 4mo agoor a large enough hand
- loloquwowndueo 4mo agoEverything Microsoft makes sucks. If they decided to make vacuum cleaners though, they wouldn’t suck, they would blow.
- lysace 4mo agoJust five years ago this opinion was heresy on HN. Those of us who still remembered their behavior in the 80s/90s were belittled. "They have changed, gramps. This really smart Satya Nadella is CEO. They are the good guys now. Don't be so bitter over old stuff like systematic use of illegal tactics to attempt to kill all of its competitors including Linux." Also: Note that the headline undersells the news dramatically. The article begins with: "GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension."
- cwnyth 4mo agoPretty sure that was astroturfing.
- lysace 4mo agoI always wondered what the division of pro-MS astroturfing was betweeen: a) Waggener Edstrom (now: WE Communications) or similar b) Microsoft employees c) Third-party Microsoft-only developers/IT people (with an obvious vested financial interest)
- loloquwowndueo 4mo agoWell the vacuum cleaner joke is very old, was true then, is true now, has continued to be true despite some people having the wool pulled over their eyes and thinking that Microsoft was no longer the enemy at some point. They have always been the enemy. Stay on your toes, don’t let them in.
- ozim 4mo agoIt is also company behind NuGet. Guess what they did a year ago. They removed 700 or so packages from NuGet proactively but those turned out to be false positives. It is hard to do the right things.
- deleted 4mo ago[deleted]
- stogot 4mo agoIt is hard for Microsoft to do the right things* FTFY
- hedora 4mo agoIn fairness, there was a time when I was unable to have a computer sort search results so the default hit was the plugin with 1000x more downloads than all the others combined.
- ozim 4mo agoContinued devils advocate. It is hard to do right things at their scale and when you do the right thing other division might actively work against you. There was this „how companies work” image where MSFT was each division pointing guns at each other.
- lacker 4mo agoPerfectly demonstrating the truth of the "Microsoft org chart" cartoon. https://bonkersworld.net/organizational-charts https://bonkersworld.net/organizational-charts
- BowBun 4mo agoI've seen this a million times, but aren't the Amazon and Apple ones kinda the same, just differently shaped?
- danielheath 4mo agoOne has 1:2 fanout, the other has 1:50 fanout.
- matkoniecz 4mo agoAlso, Apple has master micromanager overriding managers.
- dlcarrier 4mo agoAt first I though the Apple one had a half-dozen departments actually coordinating on something, but then I took a closer look and realized it's just more micromanagement.
- stingraycharles 4mo agoI think the chart is still from the Steve Jobs era, who definitely was known to be a micromanager.
- bgro 4mo agoThere’s an interview with someone talking about Steve having an extreme melt down rage about the header not being technically centered in one spot on the Apple page. I want to see his reaction trying to type a message on the iPhone keyboard from anytime in the past 7 years. Or navigate the random nonsensical grouping of stuff in settings that got so out of control they added a search bar or watch a pip video or really use anything. Every feature has some sloppy problem. It used to be excusable as nobody else was trying and they’d be working to fix it. Now they just add a feature that’s sub par to things already out there, no innovation, and then it feels sloppy. Most things just don’t feel good to use down to the size and weight of phones now. Rather than fix the problem Apple just keeps copying the homework and claiming they can’t fix perfect. Steve would be punching holes in the wall. Probably would stomp a hole through the floor to strangle the keyboard team
- sieabahlpark 4mo ago[dead]
- getpokedagain 4mo agoNot trolling here but these things are by design cesspools ready for compromise. Any fully open ecosystem where contributions are not strictly reviewed is open to this problem. If you don't like it, don't use editor extensions and use a well audited editor. If you want to use extensions or node packages or pypi packages without doing a detailed review you're accumulating technical debt. You're assuming a risk in order to ship rapidly. You can either pay that down at some point under control, or bear the interest when it comes due.
- LiamPowell 4mo agoExtensions never had to be given unsandboxed access to everything. That's a choice that they actively made.
- wutwutwat 4mo agoits easy to complain, words are cheap. fork it and change it if you don't like it
- antiframe 4mo agoIt's easy to wave a magic wand and have one developer do better than a corporation of tens of thousands. There is a reason I don't use Microsoft products: I can't do it myself and do won't do it for me.
- lkjdsklf 4mo agoThere is no editor that sandboxes extensions as described. Emacs, vim/nvim, intellij, etc… pretty much all vulnerable to such an attack Reality is most devs wouldn’t be satisfied with the limitations proper sandboxing would create.
- jurgenburgen 4mo agoThen you lose access to the VSCode marketplace which kind of defeats the purpose.
- guiambros 4mo agoWell, it certainly wasn't for lack of warning about the glaring risks... https://github.com/microsoft/vscode/issues/52116 https://github.com/microsoft/vscode/issues/52116
- dmix 4mo agoThat is a very well written proposal, I wish someone wrote that sort of ticket for my software projects