Well, "good" to see a bug that wouldn't have been solved by using Rust. I had never really thought about this attack vector though. Writing to `.bash_profile`

Well, "good" to see a bug that wouldn't have been solved by using Rust. I had never really thought about this attack vector though. Writing to `.bash_profile` is effectively the same as writing executable code. Though I like the whole "everything is a file" concept (I know this isn't exactly that but...), it seems like we should be striving for something safer. For example, I guess in something like Plan9 you could have wget start playing sound out of your speakers? Crazy. File handles shouldn't cause RCE vulnerabilities, right? I suppose sandboxing is one way of dealing with this. Another is having to explicitly "give a file" to wget and co. for editing. None of this "oh, here you go program, write to anything in my home directory".