frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Threat actors expand abuse of Microsoft Visual Studio Code

https://www.jamf.com/blog/threat-actors-expand-abuse-of-visual-studio-code/
41•vinnyglennon•3h ago

Comments

TheAdamist•1h ago
Coming from the perspective of an eclipse fan, why is VS code the defacto answer nowadays?

Im forced to use vs code (so biased), but everything seems worse than eclipse, plus these repeated security issues from malware laced projects.

Theres been several posts about infected projects by fake recruiters here in the last year or two.

Im guessing the answer is probably Java is why eclipse is out of favor.

SV_BubbleTime•1h ago
Wild. I would quit my job and start selling jam at the Farmer’s Market before I went back to Eclipse! :)
doodlesdev•1h ago

  > everything seems worse than eclipse
I would say the answer is that's not the general perception of the software. I'm personally migrating out of VSCode, because having to use the OpenVSX registry to have open-source builds makes me mad (I've since migrated to Zed for now, since I've never adapted well to neovim nor emacs).

In general, I believe most people see VSCode as "good enough". Maybe not the best text editor, but it's good enough at everything it does and extensible enough to the point that there's really no point to go for anything else unless you have a really good reason to.

   > Im guessing the answer is probably Java is why eclipse is out of favor.
My previous answer is thinking about editors in general. But in the case of Eclipse I'd say you're right LOL.
jen20•45m ago
“Java” does not explain why Eclipse is irrelevant where IntelliJ is thriving.
reaperducer•1h ago
why is VS code the defacto answer nowaday?

  1. It's free
  2. A million plug-ins
Personally, I don't use it because it's so dog slow.
mhuffman•53m ago
I have noticed that Antigravity is lightening fast, wonder what magic they are using?
josephg•25m ago
> A million plug-ins

> I don't use it because it's so dog slow.

You might find it runs better with fewer plugins.

eikenberry•1h ago
Seems very odd to me that someplace would force the use of a particular development tool. I've seen it only one time while interviewing, where they wanted everyone to have identical setups so they could easily hop onto each others computers when needed... it was weird and I took it as a red flag and didn't follow through them them.
userbinator•51m ago
That is a massive red flag to me too. They are basically saying "you are identical to everyone else, and easily replaced."
doubled112•16m ago
Wanting to be able to use anybody's machine is very strange, agreed.

From a support/IT perspective though, the closer everybody's machine is, the easier the job is.

The last software shop I worked at, we had a default set of tools and configs. It was a known happy path. You were allowed to adventure off of that path, but you were mostly on your own.

croes•14m ago
Or they bust don‘t want to look after a dozen different tools and their security issues.
dfajgljsldkjag•50m ago
Eclipse is not safer it just has fewer people looking for holes in it. The problem is not the software but how we trust code from the internet. Even if you used Eclipse a fake recruiter could still trick you into running a bad script. We cannot fix social engineering by changing the text editor.
mr_toad•49m ago
> Im guessing the answer is probably Java is why eclipse is out of favor.

Some people just want a text editor, whereas eclipse is “an IDE and Platform”.

josephg•26m ago
> Coming from the perspective of an eclipse fan, why is VS code the defacto answer nowadays?

Is eclipse good now? I used it 15 years ago. It took ages to start. It was a memory hog and it was dog slow besides. My entire team got RAM upgrades on our computers because the default company issued machines (which were quite good at the time) didn't have enough RAM to use eclipse properly.

I can't imagine why it went out of favour...

Alupis•9m ago
How much ram did you have, and when was this? I remember being extremely happy with Eclipse on an 8GB machine - this was back in the jvm7 days. Heck, I did jvm6 development with Eclipse on Windows XP with 4GB of ram and was content.

Eclipse gets a lot of automatic hate - I believe mostly since a lot of people first use it in university and struggled with their first real IDE.

For years and years I had people telling me how great IntelliJ was, etc. I eventually switched - lo and behold, IntelliJ had just as many quirks (even some of the same) as Eclipse.

dfajgljsldkjag•54m ago
It is scary that a text editor can run hidden code just by opening a folder. We traded our safety for convenience and now we are paying the price. Users will always click the button to trust a file if they think it helps them work faster. We cannot blame them when the software design makes it so easy to make a mistake.
EE84M3i•53m ago
Doesn't it ask you if you trust a folder when you open it?
dfajgljsldkjag•43m ago
You are right that the computer asks you. But people click yes because they are used to ignoring warning signs. The software relies on people making perfect choices every time and that never happens.
mmh0000•20m ago
Tooooo be fair

Vim had also had its share of execution vulnerabilities over the years.

https://github.com/numirias/security/blob/master/doc/2019-06...

croes•12m ago
> We traded our safety for convenience

Not the first time. Same with LLMs.

internet2000•19m ago
It's Macro-enabled Office files all over again.

Internet voting is insecure and should not be used in public elections

https://blog.citp.princeton.edu/2026/01/16/internet-voting-is-insecure-and-should-not-be-used-in-...
293•WaitWaitWha•2h ago•255 comments

Convert potentially dangerous PDFs to safe PDFs

https://github.com/freedomofpress/dangerzone
111•dp-hackernews•5h ago•42 comments

Binary fuse filters: Fast and smaller than xor filters (2022)

https://arxiv.org/abs/2201.01174
58•redbell•4d ago•3 comments

Threat actors expand abuse of Microsoft Visual Studio Code

https://www.jamf.com/blog/threat-actors-expand-abuse-of-visual-studio-code/
42•vinnyglennon•3h ago•21 comments

Show HN: ChartGPU – WebGPU-powered charting library (1M points at 60fps)

https://github.com/ChartGPU/ChartGPU
526•huntergemmer•13h ago•150 comments

Claude's new constitution

https://www.anthropic.com/news/claude-new-constitution
349•meetpateltech•11h ago•350 comments

Show HN: TerabyteDeals – Compare storage prices by $/TB

https://terabytedeals.com
91•vektor888•6h ago•59 comments

Mote: An Interactive Ecosystem Simulation [video]

https://www.youtube.com/watch?v=Hju0H3NHxVI
9•evakhoury•5h ago•0 comments

Skip is now free and open source

https://skip.dev/blog/skip-is-free/
314•dayanruben•12h ago•144 comments

Letting Claude play text adventures

https://borretti.me/article/letting-claude-play-text-adventures
86•varjag•5d ago•32 comments

Show HN: Rails UI

https://railsui.com/
121•justalever•9h ago•82 comments

Golfing APL/K in 90 Lines of Python

https://aljamal.substack.com/p/golfing-aplk-in-90-lines-of-python
59•aburjg•5d ago•11 comments

TrustTunnel: AdGuard VPN protocol goes open-source

https://adguard-vpn.com/en/blog/adguard-vpn-protocol-goes-open-source-meet-trusttunnel.html
80•kumrayu•10h ago•22 comments

Tell HN: 2 years building a kids audio app as a solo dev – lessons learned

60•oliverjanssen•14h ago•36 comments

Show HN: RatatuiRuby wraps Rust Ratatui as a RubyGem – TUIs with the joy of Ruby

https://www.ratatui-ruby.dev/
87•Kerrick•4d ago•12 comments

The WebRacket language is a subset of Racket that compiles to WebAssembly

https://github.com/soegaard/webracket
110•mfru•4d ago•22 comments

Beowulf's opening "What" is no interjection (2013)

https://www.poetryfoundation.org/poetry-news/69208/new-research-opening-line-of-beowulf-is-not-wh...
54•gsf_emergency_6•2d ago•43 comments

Waiting for dawn in search: Search index, Google rulings and impact on Kagi

https://blog.kagi.com/waiting-dawn-search
238•josephwegner•10h ago•148 comments

Jerry (YC S17) Is Hiring

https://www.ycombinator.com/companies/jerry-inc/jobs/QaoK3rw-software-engineer-core-automation-ma...
1•linaz•6h ago

SIMD programming in pure Rust

https://kerkour.com/introduction-rust-simd
65•randomint64•2d ago•22 comments

Challenges in join optimization

https://www.starrocks.io/blog/inside-starrocks-why-joins-are-faster-than-youd-expect
52•HermitX•10h ago•12 comments

I'll pass on your zoom call

https://operand.online/chronicle/pass.zoom
37•c4lliope•3h ago•24 comments

Three types of LLM workloads and how to serve them

https://modal.com/llm-almanac/workloads
50•charles_irl•11h ago•4 comments

Can you slim macOS down?

https://eclecticlight.co/2026/01/21/can-you-slim-macos-down/
190•ingve•20h ago•234 comments

Show HN: Differentiable Quantum Chemistry

https://github.com/lowdanie/hartree-fock-solver
9•lowdanie•4d ago•1 comments

Nested code fences in Markdown

https://susam.net/nested-code-fences.html
197•todsacerdoti•14h ago•68 comments

A verification layer for browser agents: Amazon case study

https://www.sentienceapi.com/blog/verification-layer-amazon-case-study
21•tonyww•13h ago•5 comments

Setting Up a Cluster of Tiny PCs for Parallel Computing

https://www.kenkoonwong.com/blog/parallel-computing/
35•speckx•8h ago•24 comments

Mystery of the Head Activator

https://www.asimov.press/p/head-activator
22•mailyk•3d ago•3 comments

Significant US farm losses persist, despite federal assistance

https://www.fb.org/market-intel/significant-farm-losses-persist-despite-federal-assistance
115•toomuchtodo•2h ago•99 comments