3 ms·
I agree 100%, all this does is reinforce the errors of the past and trains end users to be dumb. This is NO DIFFERENT then Windows users double-clicking on ever
by UI_at_80x24 7y ago
I agree 100%, all this does is reinforce the errors of the past and trains end users to be dumb.
This is NO DIFFERENT then Windows users double-clicking on every email attachment.
Every time somebody suggests this, the author needs to get slapped with a trout. Copy/Pasting code to get entered is BAD ENOUGH; nobody learns anything that way AND it is not secure!
In a race to the bottom everyone looses.
- t0astbread 7y agoThere is a difference between downloading, say, the Docker install script from docker.com and opening a random email attachment and that is that I trust docker.com. If I don't trust docker.com because I think it might deliver malware in the install script or a poorly written install script, then I shouldn't use Docker because why would anything different apply to their main software. If I don't trust docker.com because I fear it might be hijacked then I shouldn't use Docker because who guarantees me that their source code or any derived binaries aren't also hijacked.
- UI_at_80x24 7y agoThat trust comes from education and experience. Just like an experienced computer user could launch an email attachment safely if they know what they are doing. My point is telling new users to blindly copy/paste/autorun ALL scripts just to get $thing to work only hurts US (FOSS proponents) and the end user.