bonkabonka
Joined 16 years ago
Joined 16 years ago
So filenames can contain valid commands delimited with semi-colons that, if not quoted properly, can be unexpectedly run alongside your intended pipeline (say if you're doing the usual and unsafe "for csv in *.csv; do cat $csv; done").
I wish I could've laid my hands on the excellent HN thread from some years back that opened my eyes to this vector, but I'm hopeful someone else will mention it so I can add it to my bash notes file. :P
It is not a matter of taste and it is not a matter of metric versus imperial screwdrivers. Someone will copy this code and it will end up being an attack vector where it will have consequences.
I imagine you're rolling your eyes and have flipped the bozo bit but please bear with me.
Think of the teachable moment this presents! The author of the original piece goes back and annotates their original answer along the lines of, "you might solve it this way but there are some gotchas with it - let me show you what could go wrong."
As an industry we absolutely need to circle back with improvements so that those who come after us can build on a more solid foundation.
I do wonder if 3D Monster Maze truly qualifies as "the world's first ever 3D game on a home computer" given that the lead programmer didn't own one of the machines until April of '81 and that the commercial release occurred the following year (at least according to the article on Wikipedia - the sidebar says published 1981 so it's contradictory).
The birthday anecdote seems plausible but if Wizardry was in development for more than six months then it predates 3D Monster Maze.