4 ms·

Another useful disclaimer: all of these lets the developers push updates to your computer as they wish by default in most setups, these days you might want to d

Another useful disclaimer: all of these lets the developers push updates to your computer as they wish by default in most setups, these days you might want to decrease that kind of attack surface and just check the status in the official website when "git push" suddenly stop working. Especially when extensions and stuff sometimes changes hand and it's kind of hard to keep track of it, except for when something bad happens and gets news attention. I'm also not sure why you'd share links to software you don't even recommend yourself? Isn't it better to just not share that then? I think others could use search engine/LLM too if they need whatever, but most generally expect things shared in the comments here to actually at least have been looked at by the person sharing them.

jmb99 1mo ago
Well, the alternatives are: > It would be really cool if someone built an extension to show GitHub status live "These already exist, why wouldn't you search before posting?" > There exist quite a few extensions to show live GitHub status "Why would you not post them if you know they exist?" Or, what actually happened: > Here are some extensions that might work for you to show live GitHub status "Why would you recommend extensions to do this?" Seems to me like, if your goal is to pick apart someone suggesting something, you'll find a way to.
- embedding-shape 1mo ago
  > "Why would you recommend extensions to do this?" This is not my complaint though, my complain is: Why would you recommend extensions you haven't tried nor even read about yourself? The goal isn't to pick apart the message to piss someone off, the goal is prevent someone else than the author from getting hacked because they install some random extension, not understanding what kind of access you're giving others when doing so.
  - timcambrant 1mo ago
    They didn't recommend the extensions. They linked them because they were "merely sharing to build on for this discussion". Is all content in HN supposed to be professional and serious, or are humorous comments in fact allowed when discussing a market leading company who has had regular outages for a year and a half? (Yes, I know the actual reasons why GitHub are struggling.)
    - embedding-shape 1mo ago
      > Is all content in HN supposed to be professional and serious No > are humorous comments in fact allowed Yes Neither is what's going on here. It's reckless to share stuff you haven't even looked at yourself, that's fairly basic thing to care about. Sharing "here's a bunch of random GitHub repositories" isn't humor (I think?) nor would it been different if the text was "more professional and serious", whatever that means. Why you so mad about someone trying to help others from getting hacked? Install all extensions you want, based on what someone recommend or what you find randomly on YouTube, but let others be educated about what that means for their own security, not sure who that hurts and why you'd wanna stop it.
      - timcambrant 1mo ago
        I found it quite funny that people develop extensions that track the availability of one of the most important building blocks of the software industry, because their reliability is so poor. You could have posted a warning to not actually install random extensions. Instead you came across as questioning why anyone would post links to them at all. The poster was clear they didn't actually recommend the extensions. Sharing stuff is fun, and hardly any software posted to HN is professionally reviewed beforehand anyway.
        embedding-shape 1mo ago
        > The poster was clear they didn't actually recommend the extensions. Sharing stuff is fun Sharing stuff we know are good is fun. Sharing just random stuff? No, why would you do that? The whole point is why would you share those extensions if you don't actually recommend them? It's noise, the opposite of why we all come here in the first place. Do you also just submit whatever to HN as link submissions, without even reading it or checking it yourself?
        ncr100 1mo ago
        Just trying to wrap up this thread, and say, ... ... I intended to indicate more a Quantity concept, the existence of these links is to suggest that there is additional interest and effort out there in the human universe of developers, that this whole GitHub disruption services issue is worsening and we all here on this Hacker News thread are trodding a somewhat well-worn path. And I apologize for not making that conclusion in my comment so as to stave off spinning out a tangential discussion unnecessarily.
ncr100 1mo ago
> why you'd share links to software you don't even recommend yourself? Overall, I disagree and think it's valid and responsible to share links to apps if I disclaimed that I don't recommend installing their linked applications in an environment that has access to private data. One valid reason, to share links, is to illustrate that there are more than zero efforts to address this issue - the parent comment issue - through and even more convenient practice than firing up a web browser, following link, waiting for it to load, reviewing the material, to see if GitHub status is red or green today. So this reason attempts to build up the importance of the parent comment's idea, and suggests that legitimate verifiable work is advisable, to continue down that path of making it more convenient for developers have simpler, more human indicators about the reliability of their digital tools. Pretty simple reason but that's my reason.

jmb99 1mo ago

Well, the alternatives are: > It would be really cool if someone built an extension to show GitHub status live "These already exist, why wouldn't you search before posting?" > There exist quite a few extensions to show live GitHub status "Why would you not post them if you know they exist?" Or, what actually happened: > Here are some extensions that might work for you to show live GitHub status "Why would you recommend extensions to do this?" Seems to me like, if your goal is to pick apart someone suggesting something, you'll find a way to.

embedding-shape 1mo ago
> "Why would you recommend extensions to do this?" This is not my complaint though, my complain is: Why would you recommend extensions you haven't tried nor even read about yourself? The goal isn't to pick apart the message to piss someone off, the goal is prevent someone else than the author from getting hacked because they install some random extension, not understanding what kind of access you're giving others when doing so.
- timcambrant 1mo ago
  They didn't recommend the extensions. They linked them because they were "merely sharing to build on for this discussion". Is all content in HN supposed to be professional and serious, or are humorous comments in fact allowed when discussing a market leading company who has had regular outages for a year and a half? (Yes, I know the actual reasons why GitHub are struggling.)
  - embedding-shape 1mo ago
    > Is all content in HN supposed to be professional and serious No > are humorous comments in fact allowed Yes Neither is what's going on here. It's reckless to share stuff you haven't even looked at yourself, that's fairly basic thing to care about. Sharing "here's a bunch of random GitHub repositories" isn't humor (I think?) nor would it been different if the text was "more professional and serious", whatever that means. Why you so mad about someone trying to help others from getting hacked? Install all extensions you want, based on what someone recommend or what you find randomly on YouTube, but let others be educated about what that means for their own security, not sure who that hurts and why you'd wanna stop it.
    - timcambrant 1mo ago
      I found it quite funny that people develop extensions that track the availability of one of the most important building blocks of the software industry, because their reliability is so poor. You could have posted a warning to not actually install random extensions. Instead you came across as questioning why anyone would post links to them at all. The poster was clear they didn't actually recommend the extensions. Sharing stuff is fun, and hardly any software posted to HN is professionally reviewed beforehand anyway.
      - embedding-shape 1mo ago
        > The poster was clear they didn't actually recommend the extensions. Sharing stuff is fun Sharing stuff we know are good is fun. Sharing just random stuff? No, why would you do that? The whole point is why would you share those extensions if you don't actually recommend them? It's noise, the opposite of why we all come here in the first place. Do you also just submit whatever to HN as link submissions, without even reading it or checking it yourself?
        ncr100 1mo ago
        Just trying to wrap up this thread, and say, ... ... I intended to indicate more a Quantity concept, the existence of these links is to suggest that there is additional interest and effort out there in the human universe of developers, that this whole GitHub disruption services issue is worsening and we all here on this Hacker News thread are trodding a somewhat well-worn path. And I apologize for not making that conclusion in my comment so as to stave off spinning out a tangential discussion unnecessarily.

ncr100 1mo ago

> why you'd share links to software you don't even recommend yourself? Overall, I disagree and think it's valid and responsible to share links to apps if I disclaimed that I don't recommend installing their linked applications in an environment that has access to private data. One valid reason, to share links, is to illustrate that there are more than zero efforts to address this issue - the parent comment issue - through and even more convenient practice than firing up a web browser, following link, waiting for it to load, reviewing the material, to see if GitHub status is red or green today. So this reason attempts to build up the importance of the parent comment's idea, and suggests that legitimate verifiable work is advisable, to continue down that path of making it more convenient for developers have simpler, more human indicators about the reliability of their digital tools. Pretty simple reason but that's my reason.