Live data from Hacker News

iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

gitlab.com

31–40 of 114 posts

Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

#31
post #3

Since I didn't see it on a quick skim, it seems that the way to do this is Preferences > Advanced > Semantic history.

Based on this note[1], you can also disable with: Preferences > Pointer > CMD+Click Opens Filename/URL [1] https://gitlab.com/gnachman/iterm2/issues/3688#note_1665347

This throws out behaviour that some people find desireable (for example https://news.ycombinator.com/item?id=15288935 ), whereas it is possible to keep that behaviour without the privacy violations.

Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

#32

Given the level of concern, I will change the default and release a new version right away.

Don't beat yourself too much about it. Yes this was a serious security issue from my point of view. BUT to be honest I would probably have done the same mistake and your reaction time was more than adequate.

Thanks for the amazing job you are doing on iTerm it's a joy to use.

Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

#33

Given the level of concern, I will change the default and release a new version right away.

This is done. A summary of the issue and apology can be found here: https://gitlab.com/gnachman/iterm2/wikis/dnslookupissue

Thank you. Will you be releasing a new beta, too?

Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

#34

Given the level of concern, I will change the default and release a new version right away.

Just want to say a personal thank you for your work on it and for the quick response. iterm2 is truly one of those apps I can't believe I get to use for free - thank you.

Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

#35

Given the level of concern, I will change the default and release a new version right away.

This is done. A summary of the issue and apology can be found here: https://gitlab.com/gnachman/iterm2/wikis/dnslookupissue

Mistakes happen. Quick responses and honest apologies are always appreciated!

Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

#37

What's more interesting to me is that some people are okay with a lookup on click but not a lookup on hover. It seems a difference in affirmative intent exists between hover and click; and more generally perhaps categories of user actions should be formalized into degrees of affirmation that could mitigate errors like this.

Hovering can be a part of the everyday copy-n-paste action though, for selecting the text to copy.

Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

#38
post #7
post #6

Earlier quoted context omitted.

Just ditch it - clearly the author has no regard for privacy. I cringe just thinking about implementing something like that.

iTerm2 is great and George is absolutely responsive with any issue I've ever brought up. I am personally going to give him the benefit of the doubt here, I'm sure he'll fix things ASAP.

Yep was already fixed: https://gitlab.com/gnachman/iterm2/wikis/dnslookupissue

Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

#40

Earlier quoted context omitted.

This is done. A summary of the issue and apology can be found here: https://gitlab.com/gnachman/iterm2/wikis/dnslookupissue

Thank you. Will you be releasing a new beta, too?

Yep. I'll put that out tonight.
Post reply on HN