4 ms·

> people will cut and paste command lines from web pages [...] into root shells all the time! Do they? I've never encountered anyone using a root shell to go a

by fao_ 10y ago

> people will cut and paste command lines from web pages [...] into root shells all the time! Do they? I've never encountered anyone using a root shell to go about their business unless they had to do some exclusive operation that could only be done as root, and even then they would rather just sudo that specific operation. Hell, even if they do do that, they have bigger problems than just git, given that cut and paste is inherently broken[1]. [1]: https://news.ycombinator.com/item?id=10554679 https://news.ycombinator.com/item?id=10554679

tytso 10y ago
Do you know anyone who uses calibre, the e-book reader? You want to give it a try? Just cut and paste this: sudo -v && wget -nv -O- https://download.calibre-ebook.com/linux-installer.py https://download.calibre-ebook.com/linux-installer.py | sudo python -c "import sys; main=lambda:sys.stderr.write('Download failed\n'); exec(sys.stdin.read()); main()" Or you can trust my docker image, where I've done this for you: https://hub.docker.com/r/tytso/calibre/ https://hub.docker.com/r/tytso/calibre/ (Hint: blindly using my docker image is only slightly better from a security perspective. What you _should_ do is download the dockerfile, audit it carefully, and then create your own docker image. And then you're _still_ trusting the Calibre folks to have access to your X server....)
- azernik 10y ago
  I actually don't know anyone who uses it. Any Linux users I know would just use the book reader from their distro's repository (in my case, FBReader). EDIT: Also, holy s@@@ e-calibre, your advice (with a mild warning) if people get certificate errors is to pass in --no-check-certificate.
- discreditable 10y ago
  That docker file downloads Calibre over HTTP. Awesome!
coldtea 10y ago
>Do they? I've never encountered anyone using a root shell to go about their business unless they had to do some exclusive operation that could only be done as root, and even then they would rather just sudo that specific operation. Maybe you should encounter more devs?
- fao_ 10y ago
  I'm a developer, who works alongside other developers, on a floor full of developers. Not only does this apply to my work, but also at hack[spaces|athons] and jams I've been to (With ages ranging from ~8 - >30). I've literally never encountered anyone using su for a command that doesn't need it. Even when they need root, they just use sudo for that command.
  - coldtea 10y ago
    Well, you'd be surprised.

by fao_ 10y ago

tytso 10y ago

Do you know anyone who uses calibre, the e-book reader? You want to give it a try? Just cut and paste this: sudo -v && wget -nv -O- https://download.calibre-ebook.com/linux-installer.py https://download.calibre-ebook.com/linux-installer.py | sudo python -c "import sys; main=lambda:sys.stderr.write('Download failed\n'); exec(sys.stdin.read()); main()" Or you can trust my docker image, where I've done this for you: https://hub.docker.com/r/tytso/calibre/ https://hub.docker.com/r/tytso/calibre/ (Hint: blindly using my docker image is only slightly better from a security perspective. What you _should_ do is download the dockerfile, audit it carefully, and then create your own docker image. And then you're _still_ trusting the Calibre folks to have access to your X server....)

azernik 10y ago
I actually don't know anyone who uses it. Any Linux users I know would just use the book reader from their distro's repository (in my case, FBReader). EDIT: Also, holy s@@@ e-calibre, your advice (with a mild warning) if people get certificate errors is to pass in --no-check-certificate.
discreditable 10y ago
That docker file downloads Calibre over HTTP. Awesome!

coldtea 10y ago

>Do they? I've never encountered anyone using a root shell to go about their business unless they had to do some exclusive operation that could only be done as root, and even then they would rather just sudo that specific operation. Maybe you should encounter more devs?

fao_ 10y ago
I'm a developer, who works alongside other developers, on a floor full of developers. Not only does this apply to my work, but also at hack[spaces|athons] and jams I've been to (With ages ranging from ~8 - >30). I've literally never encountered anyone using su for a command that doesn't need it. Even when they need root, they just use sudo for that command.
- coldtea 10y ago
  Well, you'd be surprised.