4 ms·
> because a .md file feel less suspicious than a .docx For a programmer? I bet 99.9% people won't consider opening a .docx or .pdf 'unsafe.' Actually, an aver
by raincole 10mo ago
> because a .md file feel less suspicious than a .docx
For a programmer?
I bet 99.9% people won't consider opening a .docx or .pdf 'unsafe.' Actually, an average white-collar workers will find .md much more suspicious because they don't know what it is while they work with .docx files every day.
- nine_k 10mo agoMost IT departments educate users about the dangers of macros in MS Office files of suspicious provenance. The instruction may be in a .txt file, which is usually deemed safe and inert by construction.
- behnamoh 10mo ago> an average white-collar workers will find .md much more suspicious *.dmg files on macOS are even worse! For years I thought they'd "damage" my system...
- mock-possum 10mo agoIt was a rather unfortunate choice of extension
- arghwhat 10mo ago> For years I thought they'd "damage" my system... Well, would you argue that the office apps you installed from them didn't cause you damage, physically or emotionally?
- leokennis 10mo ago> an average white-collar workers will find .md much more suspicious because they don't know what it is while they work with .docx files every day I think the truly average white collar worker more or less blindly clicks anything and everything if they think it will make their work/life easier...
- RCitronsBroker 10mo agojust tell em .md stands for mortgage debater
- munk-a 10mo agoThat's how I downloaded more RAM and my life has been better ever since - especially with the recent shortages!
- AshamedCaptain 10mo agoFor a "modern" programmer a .sh file hosted in some random webserver which you tell him to wget and run would be best.
- OoooooooO 10mo agosudo run "some link to a shell script" Never understood why that became so common place ...
- SAI_Peregrinus 10mo agoStick the script in a. deb & tell 'em to use dpkg, much less suspicious.
- crotobloste 10mo agoBut people check shell scripts before running them... right?
- u8080 10mo agoAs well as .debs and other
- LoveMortuus 10mo agoI don't... I just tell myself that if anything bad happens I can always just format the computer and start anew.
- cbarrick 10mo agoIt's not really different than downloading a .msi or .exe installer on Windows and running it. Or downloading a .pkg installer on macOS and running it (or running a program supplied in a .dmg). Or downloading a .deb or .rpm on Linux and running it. It's all whether or not you trust the entity supplying the installer, be it your package manager or a third party. At least with shell scripts, you have the opportunity to read it first if you want to.
- 10mo ago
- quest88 10mo agohah, and with everything in the cloud future generations probably won't understand what a .docx is or .md or .exe
- neutronicus 10mo agoOur corporate IT is hammering pretty hard on the notion that .docx and .pdf (but especially .docx and .xlsx) are unsafe.
- logicallee 10mo ago>Our corporate IT is hammering pretty hard on the notion that .docx and .pdf (but especially .docx and .xlsx) are unsafe. why is pdf unsafe? What format is safe then?
- munk-a 10mo agoI have yet to see an exploit that can be performed with a .txt file. PDF files can have all sorts of interactive junk and nested files embedded in them - you can get really crazy in that format.
- ada1981 10mo agoThis is it. You can load a .txt as a skill too.
- neutronicus 10mo agoThe take-home message from IT is basically "never open an e-mail attachment from unknown sender".
- bguebert 10mo agoAdobe added embedded javascript to pdfs. Its an option to turn it off but its enabled by default. I turned mine off a long time back and never notice any problems but I don't use a lot of pdfs with interactive forms.