Hacker News Reader

Comment by coolgoose | Hacker News Reader

I don't get why having a modal for each tool asking for consent is too hard.

Because people want a fast out of the box editing experience. Not clicking yes for every language server.

But what they should have is a CDN with their own extensions and verified binaries. This way they can ship new versions of extensions without bumping their editor version.

> Not clicking yes for every language server.

How many language servers are we talking about here for the average dev? Three?

Yes, but you would have it for each time you opened a new workspace.

The only point of this would be if you didn't want to download the language server for untrusted code.

I think what people really want is workspace location permissions...

Wait, what. Why should you keep downloading Node per workspace? If you have one installed already?

Not downloading, but enabling. The downloading of Node isn't really the issue that people are trying to make it.

The real problem is "running" the language server on untrusted code. That's where there should be a confirm dialog.

But it's a separate issue about workspace permissions.

That's the only vulnerability here and it exists on at least one some level in all editors in language servers. (VSCode's workspace permissions aren't that secure)

The versions should generally match what's specified in the user's package.json. It doesn't make much sense then to have a separate registry.

>Because people want a fast out of the box editing experience. Not clicking yes for every language server.

That strikes me as more of a UX problem. Doing a bunch of sketchy things behind the user's back is absolutely not a solution though.

I don’t want that. Popups are one of the reasons I stopped using VSCode. They drive me nuts. Just let me write code.

Just let others silently run code on my computer? Sorry, but not for me.

Isn't that the point of downloading an editor in the first place? Not having to write your own editor code?

The point was silently.

It annoys me a lot as well, though it took me a couple of minutes to turn off the popups.

Once you've done that, it's similar to emacs for me, everything has to be evoked via a shortcut (or Action Palette which works very well in VS Code). The shortcut to show "help" or "docs" is Cmd+K Cmd+I, by the way - easy to type and remember...

The popups in VScode seem explicitly intended to annoy.

Why is showing the release log the default for so many things? Is the average user really going to read them?

It makes you wonder what they are doing with all that telemetry

Because it would turn into the popup fest that is vscode.

All it takes is a "yes to all this session" button, which is way better than just doing it quietly.

I can't remember the last time I saw a popup in vscode, maybe last year.

Do you use it?

Every day. Guess I just configured it differently to how most people do it.

I see a pop up for an update or extension that isn't working anymore pretty much every time I open it.

Well, that sucks. You should probably use a different editor that works better for you.

Reply on news.ycombinator.com