Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Don't Copy-Paste from Website to Terminal

thejh.net

Post reply on HN
Print view View original

231–240 of 272 posts

Re: Don't Copy-Paste from Website to Terminal

#231

Post by Skalman »

cmsj wrote: post #225
eli wrote: post #20

Earlier quoted context omitted.

That's a pretty narrow view. Sometimes I want a site to capture selections or right-click (think: WYSIWYG editor widget). Your beef is with the site owners who put that obnoxious stuff on their site, not with the browser that displays it. There is no limit to the number of ways a site owner can do dumb and annoying things to their readers.

No my beef is with my web browsers for allowing obnoxious things to happen. They take stands on things like blocking popups, why not clipboard interference and context menu blocking?

At least in Firefox you can prevent sites from blocking the context menu. Preferences -> Content -> [Enable JavaScript] Advanced... -> Disable or replace context menus

Re: Don't Copy-Paste from Website to Terminal

#233

Post by Thrall »

ricardobeat wrote: post #189
charlieok wrote: post #176

Earlier quoted context omitted.

Homebrew is ok, and it has arguably improved the situation on Mac OS X a great deal, but I think we can do better still. Using homebrew, one tweaks recipes in ruby code until they work. Why do we not have a common (and widely adopted!) way for software projects to tell other software how to install/uninstall them, and what other projects they depend on for what particular operations (e.g. configure, build, install, t…

Code is reusable data, and regardless of language is much more useful than an arbitrary data format. There was an attempt to port homebrew to linux, but it didn't go far. dotCloud has just open-sourced Docker[1], an attempt at solving the deployment issue. [1] http://docker.io

> There was an attempt to port homebrew to linux, but it didn't go far.

Linux already has more package managers than you can shake a stick at. To gain traction on linux, homebrew would have to offer useful features that other package managers don't have. Even then, people are more likely to copy the features into an existing linux package manager.

I don't think people tend to shop around when it comes to package managers; you use whatever your distro provides. If it sucks, you find a better distro or submit patches, depending how involved you are.

Re: Don't Copy-Paste from Website to Terminal

#234

Post by rgrau »

cschramm wrote: post #207
moonboots wrote: post #6

Bash and Zsh provide shortcuts to open a text editor where commands can be pasted and edited before running (Ctrl-x Ctrl-e in bash, need to enable in zsh [2]). I've been using this on Linux not for security but because I'm still confused by X11's primary and clipboard selections [1]. It seems like every time I try to paste a github repo link, I get the last chunk of code I copied and vice versa. [1] http://www.nongnu…

Yeah, copying GitHub URLs sucks. You cannot actually select it with your mouse, since some creepy JavaScript interferes and selects it for you. the result is that it's selected, but not copied to PRIMARY, as you'd expect. I fall into this trap every single time.

Being pissed off as I always fall into the trap, last week I wrote a userscript that adds a 'clone' button to gh webs.

Combined with xdg-open, I clone the repos locally just clicking the 'Clone' link.

http://i.imgur.com/AiTFm2R.png

Userscript itself in: https://github.com/kidd/org-protocol-github-lines/blob/clone...

Re: Don't Copy-Paste from Website to Terminal

#236

Post by XorNot »

sliverstorm wrote: post #201
trotsky wrote: post #197

Earlier quoted context omitted.

It seems like you've been putting a lot of effort in, but posix uid/gid isolation is increasingly pourous with the typical desktop environment these days. It sounds like you are ready for real RBAC - if you put the time in selinux (or apparmor or grsec) is leaps and bounds more effective.

uid/gid is generally a sound system, the problem IMO is basically that no one uses it for serious security, so a lot of things are not set up to be properly careful by default.

uid/gid on Linux also is terrible for trying to enforce inheritance. POSIX ACLs help, but they're strikingly poorly documented/supported.

Re: Don't Copy-Paste from Website to Terminal

#238

Post by Thrall »

miles wrote: post #135

Lynx user not affected: http://tinyapps.org/lynx_not_affected.png

I noticed this too. Sometimes the simple solutions are the best (compare with the long thread of suggested solutions further down this page).

It's like a master-criminal's subtle and sophisticated plan being foiled by a simpleton because it assumed that the victims would be able to read.

Re: Don't Copy-Paste from Website to Terminal

#239

Post by IanCal »

gbog wrote: post #213
eli wrote: post #20

Earlier quoted context omitted.

That's a pretty narrow view. Sometimes I want a site to capture selections or right-click (think: WYSIWYG editor widget). Your beef is with the site owners who put that obnoxious stuff on their site, not with the browser that displays it. There is no limit to the number of ways a site owner can do dumb and annoying things to their readers.

> capture selections or right-click (think: WYSIWYG editor widget) Why, no, not the same. I think it is ok for a webapp to be aware that I selected some text, and which text, so a further click on "boldface" would have a context. But it is not ok for a webapp to interfere with the text selection itself. For instance, well-intentionned chrome always add " http:// when I select the url. It gets in my way very often and…

"I have to use Trello at work but this bully don't even let me select a card title."

It does if the card is open, are you referring to it assuming you're trying to drag a card on the board view? I'd rather have that than sometimes it drags, sometimes it selects the text.

Re: Don't Copy-Paste from Website to Terminal

#240

Post by dalke »

mh- wrote: post #206
dalke wrote: post #184

Earlier quoted context omitted.

or "cat > /dev/null" and paste into the terminal to review.

wonder if there's something that would be copyable from the browser to the clipboard/pastebuffer/what-have-you (and pasteable to your terminal emulator) that would constitute a ^C?

Oh, wow - you're right! It does work, and trivially so. That is, I created chr(3), opened it in a text editor, and copy/pasted. Poof! No longer in the cat.

I then put sample command line in HTML, with an embedded  . Yep, copied and pasted just fine.

Which means my SOP for dealing with untrusted text isn't anywhere near as good as I thought it would be.

Thanks for pointing that out!

Post reply on HN