Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The problem is that it blurs the line between what is safe, and what is not safe.

It is basically the difference between telling your users to do:

  wget example.com/some_script.sh ; chmod +x some_script.sh ; ./some_script.sh
and:

  wget example.com/some_script.sh
  chmod +x some_script.sh
  ./some_script.sh
A good engineer will tell you that those two things are exactly the same. The reality however is that they really are not. The first is a single cohesive unit of work, from the perspective of the user. It is "easier", even though you could copy/paste the second example just as easily. The second is clearly three units of work. The story is the same, but the runon sentences have been removed. The user is almost forced to, subconsciously, ponder each step: First we download this, then we run it. Why the separation?

It is about reenforcing deliberate actions. Discrete options give the user time to interject their own thoughts.

If that isn't something that we value, then we should stop half-assing it and just give wget or curl an 'execute' flag.



  wget example.com/some_script.sh
  chmod +x some_script.sh
  ./some_script.sh
is missing one very important step...

  wget example.com/some_script.sh
  chmod +x some_script.sh
  $EDITOR some_script.sh
Only if it all looks sane/safe/sensible would I consider doing:-

  ./some_script.sh




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: