Forgot your password?
typodupeerror

Comment good (Score 1) 65

Good on them for taking the security threat seriously. IMO every project owner should be doing regular "bug finding missions" using the best AI tools available on a regular cadence and/or as a part of their testing process. It's a dereliction of duty if you aren't. That goes double (or triple) for OSS projects, where the bad guys have roughly the same tools available to them and where you can be sure they're using them to find flaws.

Comment Re:Please don't (Score 1) 66

The feature isn't targeted toward users who spend all their time in the terminal. Those users are likely already savvy enough to realize you shouldn't paste untrusted text into a terminal window. It's targeted toward non-power users who are completely unfamiliar with the Terminal, i.e. the majority of Mac users.

Comment Re:Please don't (Score 1) 66

The corollary is you have to not have too many false positives such that the warning is just a nuisance. Consider: how often does the type of user this is intended to protect (i.e. who would paste random text from a website into a terminal window) "normally" paste text into a Terminal window? Not very often. This warning system would go completely unnoticed for the majority of users in the course of their normal use. When they *do* have occasion to paste text into a Terminal window, ideally, it would *also* not be an irritation since false positives would be held to a reasonable rate. Power users (who actually *do* frequently paste stuff into terminal windows regularly) can just toggle the feature off. Toggling the feature off doesn't represent any security degradation relative to the prior status quo.

Slashdot Top Deals

Work expands to fill the time available. -- Cyril Northcote Parkinson, "The Economist", 1955

Working...