Comment on MaliciousCorgi: AI Extensions send your code to ChinaparentComments−esafak7moHow is that any safer?−godelski7moFirst off, I never used sudo...Second off, you're not steaming into bashThird, you gotta read between the lines a little. I used some convenience considering my audience is programmers. Don't use && or shove && `less foo.sh` in the middle. There's a million options here−fc417fc8027moDon't take the example overly literally. Saving to file means you can read it before executing it.That aside, it protects you from this gaping hole of an exploit mechanism. https://news.ycombinator.com/item?id=17636792
Comments
How is that any safer?
First off, I never used sudo...
Second off, you're not steaming into bash
Third, you gotta read between the lines a little. I used some convenience considering my audience is programmers. Don't use && or shove && `less foo.sh` in the middle. There's a million options here
Don't take the example overly literally. Saving to file means you can read it before executing it.
That aside, it protects you from this gaping hole of an exploit mechanism. https://news.ycombinator.com/item?id=17636792