News for hackers. Stuff that matters.
Re:Material Theme has been pulled from VS Code's marketplace by dark-star on Wednesday February 26, 2025 @04:22AM (#43182154)
It's a common theme:

- build an open-source thing

- wait till thousands or millions of people are using it

- change the license and close down the source

- implement malicious code

- push an update

- profit! you now have your malware running on millions of systems

Re:Material Theme has been pulled from VS Code's marketplace by jeroenhd on Wednesday February 26, 2025 @08:02AM (#43183241)
Should be added that the malicious part is often done by a third party that takes over an open source project when the original developer doesn't have the time/energy/money to maintain their open source/free work. Many Chrome extensions end up being sold for thousands or just hundreds of dollars because there's no money in them and the dev isn't all that interested.

Society as a whole could easily avoid this by funding open source/free utilities to the point where malware makers need to spend significant cash to outbid yearly community support, but unfortunately maintaining anything available online for free is a thankless job that barely covers the electricity required to maintain the code.

In this case too, the developers behind the theme seemed to want to monetise their work, which had attained almost 4 million installs, in the past, but found themselves with a rather unwilling customer base. I don't know if they snapped and uploaded something malicious or if they're intentionally making it hard for forks to copy their work, but either way the lesson learned is that if you want to make money you should just abandon your free projects and start something else.

Re:Material Theme has been pulled from VS Code's marketplace by tobyhinloopen on Wednesday February 26, 2025 @08:50AM (#43183581)
> Society as a whole

As long as we won't have to pay 2 USD for an extension!

Re:Material Theme has been pulled from VS Code's marketplace by hombre_fatal on Wednesday February 26, 2025 @09:06AM (#43183691)
Every time piracy or Youtube ads come up, HNers grandstand on how they don't even pay a dime to the content creators making the hundreds of hours of videos they watch.

GGs if you want a buck for the VSCode theme you made.

Re:Material Theme has been pulled from VS Code's marketplace by skyyler on Wednesday February 26, 2025 @09:59AM (#43184226)
I proudly block ads while giving directly to the people that make the stuff I like.

I know I'm in the minority, but I block ads because of memetic hygiene. I don't want to deprive artists but I'm not sitting through adslop for a podcaster's sake.

Re:Material Theme has been pulled from VS Code's marketplace by Thorrez on Wednesday February 26, 2025 @10:09AM (#43184344)
With Youtube at least, you can buy Youtube premium, so you don't have to sit through Youtube ads without needing an ad blocker (though you'll still have to sit through any ads the Youtuber directly adds into the video itself).

Disclosure: I work at Google.

Re:Material Theme has been pulled from VS Code's marketplace by skyyler on Wednesday February 26, 2025 @10:16AM (#43184419)
I use Youtube Premium, plus an ad blocker, plus an extension that removes shorts, plus an extension that skips sponsored segments.

Soon, I'm going to need an extension that removes the AI stuff I don't want and didn't ask for.

Using youtube in 2025 is exhausting.

Re:Material Theme has been pulled from VS Code's marketplace by Thorrez on Wednesday February 26, 2025 @10:25AM (#43184514)
Does the ad blocker do anything on Youtube since you have premium? It'll of course do things on other sites, but I'm wondering if it has any impact on Youtube.
Re:Material Theme has been pulled from VS Code's marketplace by skyyler on Wednesday February 26, 2025 @10:33AM (#43184586)
Yes. It removes ad elements that Google / Youtube don't consider to be ads, like channel stores and that sort of stuff.
Re:Material Theme has been pulled from VS Code's marketplace by coffeecantcode on Wednesday February 26, 2025 @10:38AM (#43184652)
Care to share these extensions?
Re:Material Theme has been pulled from VS Code's marketplace by skyyler on Wednesday February 26, 2025 @11:21AM (#43185128)
Ad block: https://ublockorigin.com/

Skipping sponsored sections: https://sponsor.ajay.app/

Remove shorts: https://addons.mozilla.org/en-US/firefox/addon/remove-youtub...

Return dislike: https://www.returnyoutubedislike.com/

Forgot to mention returning the dislike in my original comment.

At least I can use these extensions and get something resembling the service I want to pay for.

Re:Material Theme has been pulled from VS Code's marketplace by coffeecantcode on Wednesday February 26, 2025 @02:29PM (#43187211)
Bless you, appreciate the sauce.
Re:Material Theme has been pulled from VS Code's marketplace by dspillett on Wednesday February 26, 2025 @10:57AM (#43184846)
At £12/month YT Premium feels rather expensive for what we'd get out of it (though we have considered it for our Dad who uses it for music and train videos a lot) compared to other subscription services.

Also note that while it takes away the ads, it does nothing about the stalking (which bothers me much more than the adverts themselves) the results from which will be used to serve ads if you cancel in future (and in any case may be made available, directly or otherwise, to third parties, unless that part of the terms has changed).

Re:Material Theme has been pulled from VS Code's marketplace by Thorrez on Thursday February 27, 2025 @08:51AM (#43194338)
US prices:

Netflix 1080p: $18/mo. Netflix 4k: $25/mo. No annual plan.

Youtube Premium, which offers 4k, is $14/mo, or $120/yr for the annual plan (which averages to $12/mo).

UK prices:

Netflix 1080p: £13/mo. Netflix 4k: £19/mo. No annual plan.

Youtube Premium: £12/mo. No annual plan.

It's interesting how in the Youtube Premiums discount over Netflix is smaller in the UK than the US, and how Youtube Premium lacks an annual plan in the UK.

>Also note that while it takes away the ads, it does nothing about the stalking

Does an ad blocker change that?

Re:Material Theme has been pulled from VS Code's marketplace by dspillett on Thursday February 27, 2025 @12:27PM (#43196448)
> > Also note that while it takes away the ads, it does nothing about the stalking

> Does an ad blocker change that?

In many places, yes. Youtube? Less so, but it depends on which blocker(s) are in play.

A DNS based blocker won't help completely as some of the ad/track related requests are coming from their main domain or sub-domains that are used for other things so can't be blocked wholescale. It will block JS and other resources pulling from *.doubleclick.net though.

A browser/add-on based blocker may do much better by being able to more selectively block resource that are tracking related. It will also be able to block data passed via embedded videos in other sites. They can, and probably do, still track based on what you are actually watching via requests to the main domain, no ad blocker can do much about that without blocking the whole site.

Re:Material Theme has been pulled from VS Code's marketplace by Thorrez on Friday February 28, 2025 @08:57AM (#43205607)
When it comes to embedded videos, that reminds me of youtube-nocookie.com . If the website does an embed using youtube-nocookie.com , that prevents I believe what is being described as "stalking".

>The Privacy Enhanced Mode of the YouTube embedded player prevents the use of views of embedded YouTube content from influencing the viewer’s browsing experience on YouTube. This means that the view of a video shown in the Privacy Enhanced Mode of the embedded player will not be used to personalize the YouTube browsing experience, either within your Privacy Enhanced Mode embedded player or in the viewer’s subsequent YouTube viewing experience.

>If ads are served on a video shown in the Privacy Enhanced Mode of the embedded player, those ads will likewise be non-personalized. In addition, the view of a video shown in the Privacy Enhanced Mode of the embedded player will not be used to personalize advertising shown to the viewer outside of your site or app.

https://support.google.com/youtube/answer/171780?hl=en#zippy...

Re:Material Theme has been pulled from VS Code's marketplace by izzydata on Wednesday February 26, 2025 @10:10AM (#43184352)
I fundamentally disagree with making money from ads. I have no problem giving money to people who make things.
Re:Material Theme has been pulled from VS Code's marketplace by Der_Einzige on Wednesday February 26, 2025 @11:44AM (#43185374)
Copyright abolitionists are more than happy to embrace no one ever making money off of "software" again.
Re:Material Theme has been pulled from VS Code's marketplace by notpushkin on Wednesday February 26, 2025 @04:58AM (#43182331)
The closing down step is optional. Just don’t build on a public CI, and inject malicious code in your builds, xz-style.
Re:Material Theme has been pulled from VS Code's marketplace by pickledoyster on Wednesday February 26, 2025 @05:05AM (#43182367)
yup, many mobile app developers do this (inject any SDK that'd pay them) too. Doesn't need to be open source, though
Re:Material Theme has been pulled from VS Code's marketplace by DANmode on Wednesday February 26, 2025 @10:19AM (#43184461)
Mobile app devs are often scum,

but no need to single them out.

Plenty of bait and switch later free apps turned freemium, or malicious, out there.

Re:Material Theme has been pulled from VS Code's marketplace by oneeyedpigeon on Wednesday February 26, 2025 @04:50AM (#43182292)
This is a good description of the problem. I'm not sure why it's been downvoted, except that "common" is overstating it a bit.
Re:Material Theme has been pulled from VS Code's marketplace by talkingtab on Wednesday February 26, 2025 @08:22AM (#43183383)
Hey! Isn't that the Microsoft business model? Doesn't MS control VS Code? (google microsoft antitrust).
Re:Material Theme has been pulled from VS Code's marketplace by not_wyoming on Wednesday February 26, 2025 @09:45AM (#43184067)
Are you contending that's what happened here? This is not a leading question, I genuinely do not know and am trying to learn more.
Re:Material Theme has been pulled from VS Code's marketplace by mightysashiman on Wednesday February 26, 2025 @10:47AM (#43184763)
reminds me of mx player on android (nova launcher also?)