this post was submitted on 14 Dec 2025
6 points (87.5% liked)
Hacker News
3265 readers
487 users here now
Posts from the RSS Feed of HackerNews.
The feed sometimes contains ads and posts that have been removed by the mod team at HN.
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Sounds like this person let it. But still, what if the command is long, lots of arguments, pipes, and confusing commands?
I think most people would probably just allow it. I’m not saying I wouldn’t… but this all makes me very nervous, because it fails in small ways pretty often
I always read the whole command, otherwise it could do whatever. I generally let it have read+write access in the project directory (it's in git anyway) and manually review every command it wants to run.