351–360 of 419 posts
Earlier quoted context omitted.
For a "modern" programmer a .sh file hosted in some random webserver which you tell him to wget and run would be best.
sudo run "some link to a shell script" Never understood why that became so common place ...
Earlier quoted context omitted.
The smart bear versus the unopenable trashcan.
What's the point of the analogy? That the bear just moves on? Genuine question; I've never heard this one before.
The analogy is probably implying there is considerable overlap between the smartest average AI user and the dumbest computer-science-related professional. In this case, when it comes to, "what is this suspicious file?".
Which I agree.
Earlier quoted context omitted.
> because a .md file feel less suspicious than a .docx For a programmer? I bet 99.9% people won't consider opening a .docx or .pdf 'unsafe.' Actually, an average white-collar workers will find .md much more suspicious because they don't know what it is while they work with .docx files every day.
For a "modern" programmer a .sh file hosted in some random webserver which you tell him to wget and run would be best.
It's been over a decade since this became a norm...
And 10 years since https://news.ycombinator.com/item?id=17636032
The link sadly seems to be dead though
Earlier quoted context omitted.
For a "modern" programmer a .sh file hosted in some random webserver which you tell him to wget and run would be best.
sudo run "some link to a shell script" Never understood why that became so common place ...
It's all whether or not you trust the entity supplying the installer, be it your package manager or a third party.
At least with shell scripts, you have the opportunity to read it first if you want to.
If you do, just like curl to bash, you accept the risk of running random and potentially malicious shit on your systems.
In this demonstration they use a .docx with prompt injection hidden in an unreadable font size, but in the real world that would probably be unnecessary. You could upload a plain Markdown file somewhere and tell people it has a skill that will teach Claude how to negotiate their mortgage rate and plenty of people would download and use it without ever opening and reading the file. If anything you might be more succes…
> because a .md file feel less suspicious than a .docx For a programmer? I bet 99.9% people won't consider opening a .docx or .pdf 'unsafe.' Actually, an average white-collar workers will find .md much more suspicious because they don't know what it is while they work with .docx files every day.
Earlier quoted context omitted.
For a "modern" programmer a .sh file hosted in some random webserver which you tell him to wget and run would be best.
sudo run "some link to a shell script" Never understood why that became so common place ...
Maybe the good side-effect of LLM's will be to standardize better hygiene and put a nail in the coffin of using full-fat kitchen sink OS images for everything.