Don't copy paste from a website to a terminal
1–10 of 257 posts
Re: Don't copy paste from a website to a terminal
#2The problem is that there's a lot of software out there that expects you to install it this way - particularly by piping into sh or bash or the like. See also http://www.seancassidy.me/dont-pipe-to-your-shell.html and http://output.chrissnell.com/post/69023793377/stop-piping-cu... and https://www.chef.io/blog/2015/07/16/5-ways-to-deal-with-the-... . There was also a blog out there collecting instances of this, but I couldn't find it again after a couple searches.
I had to hold my nose and paste some commands like this in order to reinstall Composer [1] and Drupal Console [2] earlier this week. Ugh, it feels so dirty, but it's often the first and/or the easiest, if not the only, way that software like this documents how it's to be installed.
Re: Don't copy paste from a website to a terminal
#3I don't get it... even if the pasted content has stuff I don't expect, I still see it in my shell prompt before I press Enter, no?
Re: Don't copy paste from a website to a terminal
#4A good terminal should show you the full pasted text in a confirmation popup before executing it. Also should never accept new lines from a paste. Or rather; if and when the paste contains new lines, it should show a confirmation popup so you know what the hell you're executing.
Re: Don't copy paste from a website to a terminal
#5The problem is that there's a lot of software out there that expects you to install it this way - particularly by piping into sh or bash or the like. See also http://www.seancassidy.me/dont-pipe-to-your-shell.html and http://output.chrissnell.com/post/69023793377/stop-piping-cu... and https://www.chef.io/blog/2015/07/16/5-ways-to-deal-with-the-... . There was also a blog out there collecting instances of this, but I…
None of those commands are so long that you shouldn't just be retyping them by hand. It's obviously not an ideal way to install anything, but it's much safer than copy and pasting.
Re: Don't copy paste from a website to a terminal
#6Interesting tidbit, I didn't know setting the position of text off the string would still be copied.
Re: Don't copy paste from a website to a terminal
#7I don't get it... even if the pasted content has stuff I don't expect, I still see it in my shell prompt before I press Enter, no?
If there's a newline in the pasted contend it's already too late.
Re: Don't copy paste from a website to a terminal
#8copying and pasting to notepad or even the address bar reveals the hidden text.
Re: Don't copy paste from a website to a terminal
#9First he says copy and paste to save for later.... Like in Notepad?
Then switches to running things in the terminal. We already saw your 'trick' in step 1 when viwed in our Snippets Notepad file...
Re: Don't copy paste from a website to a terminal
#10I don't get it... even if the pasted content has stuff I don't expect, I still see it in my shell prompt before I press Enter, no?
No, if it includes a line break it will execute.