OMG rm -rf ~ in a valentine bash script and its partly my fault
williamedwardscoder.tumblr.com
OMG rm -rf ~ in a valentine bash script and its partly my fault
1–10 of 38 posts
Re: OMG rm -rf ~ in a valentine bash script and its partly my fault
#2The repo owner was stupid for not checking what they were merging, and the author is stupid for making the pull request in the first place. If they wanted to prove a point, they should have merged something a little less harmful, like "echo This file could have deleted your home folder. Don't run random scripts from the Internet without inspecting them first."
Re: OMG rm -rf ~ in a valentine bash script and its partly my fault
#3This reminds me of the prat that decided to teach me a lesson in PHP security by exploiting my first script & deleting my entire website when I was 15. :(
Lesson learned, and it got me into PHP security, but I can't help but feel there are nicer ways to go about giving such an important lesson...
Re: OMG rm -rf ~ in a valentine bash script and its partly my fault
#4I don't know who are crazier here.
Also the owner of the script saying that the person should not made a pull request (and a issue) instead is missing the point, not that I agree with a dangerous pull request (in case the owner of the repository is crazy), but the owner of the repository merging the request just because it was a request (instead of a issue) sounds like someone wishing to shit to happen.
It would be like pushing a wedge into the train tracks and blaming the guy (that also had the bad idea) to put the wedge near the tracks.
Re: OMG rm -rf ~ in a valentine bash script and its partly my fault
#5This reminds me of the prat that decided to teach me a lesson in PHP security by exploiting my first script & deleting my entire website when I was 15. :( Lesson learned, and it got me into PHP security, but I can't help but feel there are nicer ways to go about giving such an important lesson...
Like adding a note that he could've deleted all your files. This is just vandalism disguised as a "heads-up."
Re: OMG rm -rf ~ in a valentine bash script and its partly my fault
#6The repo owner was stupid for not checking what they were merging, and the author is stupid for making the pull request in the first place. If they wanted to prove a point, they should have merged something a little less harmful, like "echo This file could have deleted your home folder. Don't run random scripts from the Internet without inspecting them first."
Right. If you are going to troll, do it with something annoying but harmless: download and play an audio file, lock the screen so they have to sign in again, pop open 100 gnome-shells, etc.
Re: OMG rm -rf ~ in a valentine bash script and its partly my fault
#7This is one of my pet peeves of late - so many tools and tutorials advise the user to curl and pipe some script of the net to install and make it work.
Why aren't we teaching people to be a little cautious - to download, review and then install?
How did developers become so lazy, and so coddled that we desire convenience over security or forethought?
Or worse, is it really due to an increasing number of developers who are unable rather than unwilling to review scripts, tools or libraries before use.
Do we need a new movement for 'the literate programmer', that emphasises the need to learn than just the core language or framework or ecosystem that they are using?
Re: OMG rm -rf ~ in a valentine bash script and its partly my fault
#8What kind of title is this? "Evil Open Source". It has nothing to do with the content. The linked post itself is titled "OMG rm -rf ~ in a valentine bash script and its partly my fault??!?!"
Re: OMG rm -rf ~ in a valentine bash script and its partly my fault
#9"Your house is not fire-proof, that's why I burned it."
Congratulations for proving your point by destroying other people's work.
Seriously that's nothing you would expect from a thoughtful person.
Re: OMG rm -rf ~ in a valentine bash script and its partly my fault
#10This reminds me of the prat that decided to teach me a lesson in PHP security by exploiting my first script & deleting my entire website when I was 15. :( Lesson learned, and it got me into PHP security, but I can't help but feel there are nicer ways to go about giving such an important lesson...
If i teach some people websecurity i post some fancy chiptune music from youtube with autoplay. Problem proofed, much cooler, lesson learned. All happy.