To those name-calling the author of the script: The product/update is hyped and the release date is set in stone. Tensions are high and your boss has already let you know that you're on thin ice and not delivering on the project goals. A last-minute showstopper bug comes in, caused by file leaks. Everyone is scrambling, and the file belongs to you so its on you to fix it alone. There is no time for code review, and d…
Yes, that person is still an unprofessional idiot. If a doctor accidentally removes the wrong organ because administrators have overscheduled him, "whoopsie, not my fault" is not the appropriate answer. The same applies to engineers working on bridges. Professionals take responsibility for their working conditions. There is an enormous shortage of programmers right now. Anybody shipping stuff that is bad or dangerous…
Moved ~/.local/share/steam. Ran steam. It deleted everything owned by user
241–250 of 280 posts
Re: Moved ~/.local/share/steam. Ran steam. It deleted everything owned by user
#242Earlier quoted context omitted.
But these are applications for knowledgeable users I think which is not the type of users the GGP is talking about. For these it might be ok to ask for permission. Or to grant it automatically if you are root or sudo'ed. And many use cases could get around with allowing silently to write if the file has been previously been opened by the same application.
I will not use a system that pops up some kind of UAC-like approval dialog for every call Emacs makes to open(2).
Disk scanning programs like DaisyDisk from the app store have to make you do this before they can get any information about disk usage.
Re: Moved ~/.local/share/steam. Ran steam. It deleted everything owned by user
#243Earlier quoted context omitted.
Not if the previous line was: STEAMROOT=$SOME_OTHER_UNSET_VARIABLE/ "rm -r " is a code smell, as much as "cc -o myprog .c" is. You should always know what files make up your system, and track them in a MANIFEST file. There's rarely a good reason to use wildcards when a program is dealing with its own files. xargs rm -df -- fixes this.
That looks like it works until your MANIFEST file ends up with a space character in one of the file names. For GNU xargs I like adding -d\\n which handles everything except files with an embedded newline. Those are much rarer than files with a space, though. Sadly, OS X xargs (probably BSD based) doesn't have that option, so I have an alias to do the same thing: alias xargsn="tr '\n' '\0' | xargs -0"
Re: Moved ~/.local/share/steam. Ran steam. It deleted everything owned by user
#244Earlier quoted context omitted.
rm --preserve-root isn't a bad thing to have either. That way, even if you do screw up, you won't be able to run rm against '/', even with '-f'. It's one of the top aliases in my .bash_aliases file.
I think that rm --preserve-root -rf /* doesn't save you.
Re: Moved ~/.local/share/steam. Ran steam. It deleted everything owned by user
#245The sad sad part of all this is that Half-life 1 had a similar bug in their windows installer and would wipe your program files if not careful http://arstechnica.com/civis/viewtopic.php?t=479484
Re: Moved ~/.local/share/steam. Ran steam. It deleted everything owned by user
#246Earlier quoted context omitted.
Steam manages game installation and updates; those games are themselves separate applications. That's what I was referring to.
There seem to be several reasonable ways to address this kind of situation without requiring universal access. One would be analogous to an ACL arrangement rather than simple ownership. Steam applications could be installed with Steam also having permission to access their resources. A second possibility would be to have the operating system provide dedicated services for installing and maintaining software. We’re al…
I can count the times I've been owned through an app that doesn't run content from the internet (either accessed by or being a server for) on zero hands.
What is the problem that sandboxing every app into a homogenous set of thou-shalt-not's solves?
Re: Moved ~/.local/share/steam. Ran steam. It deleted everything owned by user
#247Earlier quoted context omitted.
Gotta question why they used -f.
That's normal, but why the trailing slash?! That's just pointless, and almost looks like an explicit deathtrap. Without the slash, an empty variable would result in a command line of "rf -rf" which would simply fail due to the missing argument. There is absolutely no need for having a trailing slash, it's not as if "rf -rf foo" and "rm -rf foo/" can ever mean two different things, there can be only one "foo" in the f…
Re: Moved ~/.local/share/steam. Ran steam. It deleted everything owned by user
#248Earlier quoted context omitted.
There seem to be several reasonable ways to address this kind of situation without requiring universal access. One would be analogous to an ACL arrangement rather than simple ownership. Steam applications could be installed with Steam also having permission to access their resources. A second possibility would be to have the operating system provide dedicated services for installing and maintaining software. We’re al…
Silly question; how common is this class of bug? We're talking about an application that lives on the local system, and is probably only exploitable via social engineering bugs (i.e. we convince the user to do something stupid). I can count the times I've been owned through an app that doesn't run content from the internet (either accessed by or being a server for) on zero hands. What is the problem that sandboxing e…
And where do your apps come from? Wasn't there a thread the other day about installing the top apps from download.com and counting the chaos they inflicted on the system? Sure, you can avoid that, but not everyone does.
Re: Moved ~/.local/share/steam. Ran steam. It deleted everything owned by user
#249Earlier quoted context omitted.
Your analogy is flawed. What is happening instead is someone is making a lamp, and then putting a sign on it says "LAMP is a lamp that lights your home! It's compatible with electricity and is under no warranty, express or implied!" and offering to let you take it home. And you seem to have missed the part where I explicitly said that both commercial and noncommercial software should be exposed to liability lawsuits.…
No, what is happening is someone making the instructions on how creating a lamp public and saying "I use this lamp in a controlled environment where using it cannot hurt anyone. If you try to use it outside of a similar controlled environment it may explode in your face, create a black hole and/or anhilate the universe. I don't really know, since I did not test it in that environment. Use it at your own risk." Then p…