Comment

Comment by TacticalCoder

Suggesting bash/curl'ing to get a 12 lines JSON file is just... Not great. We've seen a shitload of developers account getting compromised (with all the supply chain attacks) and developers account turning evil.

Also there's absolutely zero need to be sudo to put a JSON config file for Firefox on Linux.

You're basically bash/curl'ing the kitchen sink, with all the security risks that entails, executing a shell script as root (which may or may not be malicious now or at some point in the future), just to...

Put a 12 lines JSON file in a user's Firefox config folder.

Way to go my "fremen" brothers [1].

[1] the "fremen" in Dune as those who adore the Shai-Hulud

parent TacticalCoder 9 months ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton