I kind of get what everyone here is saying, but in my experience i love passkeys and use them for everything as much as possible. I especially love the qr code feature where you can login with a passkey that is only on your phone on another machine without having to do any setup.

Also I find it a bit frustrating when people say password or otp just works. No they absolutely do not work. Even technical people on here get phished all the time even with otp.

sure i guess, but some of the best food i've ever eaten was in some cheap chinese restaurant that didnt care at all about the "experience" or w/e ^^

Yea I don’t get the GP/OP sentiment at all.

Some of the best food I ate in places that looked like complete design wrecks. And yes now these places use a lot of really badly made ai art.

The food is still delicious.

I think there's a difference between passively and actively putting no thought into something; generating a menu with AI involves deciding that it's worth having but that you don't care about the quality.

Okay but this is just not true here. VSCode always first asks you if you trust the author of this code and if not gives you the option to open the directory in restricted mode

> VSCode always first asks you if you trust the author of this code

until we do that, VSCode doesn't let us interact with the codebase, so we end up clicking that trust as soon as we open the directory and move on.

When VSCode detects launch commands in ".vscode", It should be rather explicit about running it, like "Trusting this workspace runs the following command on your behalf"

vscode explicitly warns you when you open a directory and gives you the choice to open it in restricted mode without all the integrations. it's not zero click at all.

I feel like vscode is doing everything right here and they cant really do much about users choosing to ignore security warnings. Other IDEs here do exactly the same or less. Not saying there isn't room to improve, but again if you're uninstalling vscode what are you going to replace it with?

Hiding malicious behavior behind security warnings you can only click yes or no to is the Microsoft way of neatly denying responsibility, and it compounds and reinforces itself. This pdf looks like a pdf, acts like a pdf, opens like a pdf, what are you going to do? You clicked OK so you wanted that Outlook virus to email itself to everyone on your address book and send their bitcoin to Madagascar, not Microsoft.

what is the alternative here? never ever running git hooks, lsps etc. all of these are vulnerable. and again no other ide here has a better solution.

if you just clone a repo no githooks are every automatically enabled. but since this was downloaded not cloned it's a different story

yeah i honestly like it a lot too, but i wish it was typed and that the tooling around it was better. though it's getting there...

There's a language called "Nickel" which grew (eventually! it took a long time) out of efforts to add a type system to Nix. It's still early days in that it's under very active development and evaluation performance still lags behind Nix, it it's feature-complete enough to be useful for some things.

The core work is driven by programming languages people, and chiefly one in particular. But its initial outline and subsequent design decisions have all been informed both by a survey of existing configuration languages (and I mean interesting ones, like CUE, Jsonnet and Starklark) and input from Nix people. I think it's fair to call it "state-of-the-art". (Whether that last point is good or bad depends on your perspective, I guess!)

Besides the type system, better error messages, and integrating something like the Nix module system as a first-class language feature, there's been more emphasis on tooling than Nix had at comparable stages of its own development (including LSP support).

I think it's a really interesting language. If its bet pans out, it'll stand out among configuration languages for offering a nice gradient of simplicity and sophistication, like Nix does: simple configs feel plainly readable, inert, and unceremonious, but you have enough power to offer clean interfaces if you're writing something that adds new features. But it promises to do it without the sharp edges Nix has. Time will tell!

https://nickel-lang.org/

https://github.com/nickel-lang/nickel

imo the downsides to this are so minimal to a user? you can configure neovim without defining any functions or w/e and it's not like awkward or anything

i find nix a weird mention here. there is a popular segment of people who wish nix would have used a generic programming language instead of a dsl, but i cant imagine nix working with something like toml ever. the complexity to build every program ever in every programming language is just way too high for that.

every jellyfin app nowadays not only has downloads, but unlike plex it even works relialby

It works reliably with Plex too, I use it every time I travel or take the train, not sure useless taunts are necessary here.

it's just one of the most common complaints i see all the time from plex users and was a big reason i switched too