savedbythezsh

joined 2 years ago
MODERATOR OF
[–] savedbythezsh 3 points 9 months ago

This is a fantastic write-up, thanks for sharing!

[–] savedbythezsh 3 points 9 months ago (2 children)

What's wrong with Business Insider? Genuine question

[–] savedbythezsh 17 points 10 months ago (1 children)

You declare it in the package.json as a category when publishing. It's completely self-selected with no oversight, review, or enforced permissions.

[–] savedbythezsh 39 points 10 months ago (4 children)

I believe they're referring to lower down in the article, where the researchers analyzed existing extensions on the marketplace:

After the successful experiment, the researchers decided to dive into the threat landscape of the VSCode Marketplace, using a custom tool they developed named 'ExtensionTotal' to find high-risk extensions, unpack them, and scrutinize suspicious code snippets.

Through this process, they have found the following:

  • 1,283 with known malicious code (229 million installs).
  • 8,161 communicating with hardcoded IP addresses.
  • 1,452 running unknown executables.
  • 2,304 that are using another publisher's Github repo, indicating they are a copycat.
[–] savedbythezsh 1 points 10 months ago

I use Jenkins for work, unfortunately, so I have plenty of experience

[–] savedbythezsh 4 points 10 months ago (3 children)

FYI, Jenkins has an endpoint to validate the pipeline without running it, and there's a VSCode extension to do this without leaving the editor: https://www.jenkins.io/blog/2018/11/07/Validate-Jenkinsfile/

[–] savedbythezsh 1 points 10 months ago

FYI you can (sorta) redirect searches from the start menu: https://www.windowscentral.com/how-let-google-handle-cortana-web-search-results-windows-10

Mine all go to DDG in FF

[–] savedbythezsh 3 points 10 months ago (4 children)

The WinAmp maybe sorta open-sourcing is interesting. I've never used it (aside from downloading it to get MilkDrop working in Foobar2000).

[–] savedbythezsh 2 points 10 months ago

Yeah exactly, but to get to that point we needed to message it to consumers as such for ~20 years. Similarly, in OPs example, the 20mg feels similarly to a 40mg, but with half the nicotine - clearly the measurement on the box is being used as a proxy for "how does this feel" (no clue if that has a measurement/is measureable) but could definitely message it similarly

[–] savedbythezsh 2 points 10 months ago
[–] savedbythezsh 5 points 10 months ago (2 children)

That's when you take a page out of the book of lightbulb manufacturers. On the box, CFLs and LEDs don't show their actual wattage on the front, they write "100w equivalent" because that's how people are used to measuring luminosity.

[–] savedbythezsh 2 points 10 months ago

I feel the same way. Designing good, opinionated APIs is HARD, but it also provides the best experience for both the author and the consumer.

  • Prettier is the undisputed king of JS formatters because it has no options by design. You set and forget.
  • One of the reasons iOS is so successful is because they lock down their APIs and put strict standards on apps, making it hard to write something that doesn't at least look good and slot into the OS well.

Among other examples.

view more: ‹ prev next ›