6 ms·

unfortunately, as I discovered with a recent fresh Manjaro install, VSCodium cannot access the standard MS extension repo, which makes it next to worthless as a

unfortunately, as I discovered with a recent fresh Manjaro install, VSCodium cannot access the standard MS extension repo, which makes it next to worthless as a production tool because no one is uploading anything to their own repo. I can't work without my tools, and I can't be arsed to manually install and build and update every extension and its dependencies that I rely on.

oh_boy 5y ago
Sure you can use vscodium with the official marketplace. I use that for over a year now without issues. https://github.com/VSCodium/vscodium/blob/master/DOCS.md#how-to-use-the-vs-code-marketplace https://github.com/VSCodium/vscodium/blob/master/DOCS.md#how...
- easton 5y ago
  Of course, that's against the Microsoft licensing agreement. The VS Extension marketplace is only licensed for use with Visual Studio and Visual Studio Code (as are all of the good Microsoft extensions: Pylance, the Remote Pack, Codespaces, etc). The top of the log file for the remote extension always says this: " * * Visual Studio Code Server * * Reminder: You may only use this software with Visual Studio family products, * as described in the license https://aka.ms/vscode-remote/license https://aka.ms/vscode-remote/license * "
solarkraft 5y ago
What do you mean by “no one is uploading anything to their own repo”? Everything I’ve wanted (exception: dotnet debugger) is on https://open-vsx.org/ https://open-vsx.org/.
kova12 5y ago
if you don't trust microsoft with telemetry, you shouldn't trust extensions written by random people either
- nexuist 5y ago
  A perfect encapsulation of why these privacy complaints are next to worthless. You don't trust Microsoft with telemetry but your package.json pulls in 30 packages from completely random Internet strangers who published something that looked cool on GitHub. There's no coherent threat model here. There are a million different ways to shoot yourself in the foot and compromise your codebase before we even begin to consider what Microsoft can do with the knowledge of what buttons you press sometimes.
  - Sanguinaire 5y ago
    A bit disingenuous I think; people are concerned about security when worrying about random packages, but privacy with Microsoft. MS have a history of being hostile to open source, but have been able to launder their image somewhat.
    - nexuist 5y ago
      Privacy and security are the same thing. When one is compromised so is the other. Any untrusted code that runs on your machine has the implicit capability of exfiltrating information that would rip apart your privacy.
    - siproprio 5y ago
      They were 'attempting' to launder their image.
  - siproprio 5y ago
    > There's no coherent threat model here. My threat model is Microsoft selling bogus "productivity enhancement" features to customers, pushing duplicated features, collecting data on costumers to acquire business sensitive information, and using marketshare as leverage to strangle better products.
- yjftsjthsd-h 5y ago
  Known-bad is worse than unknown, surely?

oh_boy 5y ago

Sure you can use vscodium with the official marketplace. I use that for over a year now without issues. https://github.com/VSCodium/vscodium/blob/master/DOCS.md#how-to-use-the-vs-code-marketplace https://github.com/VSCodium/vscodium/blob/master/DOCS.md#how...

easton 5y ago
Of course, that's against the Microsoft licensing agreement. The VS Extension marketplace is only licensed for use with Visual Studio and Visual Studio Code (as are all of the good Microsoft extensions: Pylance, the Remote Pack, Codespaces, etc). The top of the log file for the remote extension always says this: " * * Visual Studio Code Server * * Reminder: You may only use this software with Visual Studio family products, * as described in the license https://aka.ms/vscode-remote/license https://aka.ms/vscode-remote/license * "

solarkraft 5y ago

What do you mean by “no one is uploading anything to their own repo”? Everything I’ve wanted (exception: dotnet debugger) is on https://open-vsx.org/ https://open-vsx.org/.

kova12 5y ago

if you don't trust microsoft with telemetry, you shouldn't trust extensions written by random people either

nexuist 5y ago
A perfect encapsulation of why these privacy complaints are next to worthless. You don't trust Microsoft with telemetry but your package.json pulls in 30 packages from completely random Internet strangers who published something that looked cool on GitHub. There's no coherent threat model here. There are a million different ways to shoot yourself in the foot and compromise your codebase before we even begin to consider what Microsoft can do with the knowledge of what buttons you press sometimes.
- Sanguinaire 5y ago
  A bit disingenuous I think; people are concerned about security when worrying about random packages, but privacy with Microsoft. MS have a history of being hostile to open source, but have been able to launder their image somewhat.
  - nexuist 5y ago
    Privacy and security are the same thing. When one is compromised so is the other. Any untrusted code that runs on your machine has the implicit capability of exfiltrating information that would rip apart your privacy.
  - siproprio 5y ago
    They were 'attempting' to launder their image.
- siproprio 5y ago
  > There's no coherent threat model here. My threat model is Microsoft selling bogus "productivity enhancement" features to customers, pushing duplicated features, collecting data on costumers to acquire business sensitive information, and using marketshare as leverage to strangle better products.
yjftsjthsd-h 5y ago
Known-bad is worse than unknown, surely?