Post

i am once again begging windows users to understand that linux nerds give you instructions in the form of terminal commands because "paste this in" is a million times faster than trying to lead you through the gui one button at a time, not because the gui doesn't exist

I feel like teaching users to paste something into the terminal that they dont understand is creating an easy vector for malicious actors. A GUI cant download and run a malicious program all in one ctrl+v - Enter. Going through a GUI gives time to think and take in context clues. /1

And like, I do use the terminal and find it more efficient for some purposes. Hell my VPS I only connect w/ a terminal. But it takes an extra level of nerd. A GUI is easier to teach so they arent reliant on you, and also can screen better for malicious actions.

there is an entire industry of scams that open with "ok install this remote desktop software so i can have full control of your computer"

Yes there is. But that is just whataboutism. We arent actively teaching people to install the remote desktop apps so malicious actors then have an easier time convincing people to do it. Teaching them to paste random terminal commands opens up a new vector.

people should not paste terminal commands willy-nilly, no, but they shouldn't do *anything* willy-nilly. but then how do they solve complicated problems before they know what they're doing? i don't have a good answer for that. the windows answer is "yeehaw" but when linux does it now it's bad

there are other people in this thread talking about the same thing happening *on windows* with powershell commands too

the nice thing about shell commands is that you can at least in principle look up each bit individually. i don't think there's like comprehensive documentation of registry keys, and the help for individual buttons in a dialog often assumes you already know all the other context

It's kinda bad because javascript lets the site push arbitrary text to the clipboard, unless someone thinks to paste it in notepad first there basically isn't a way to inspect it first

Ya, its not a linux specific issue. Windows has powershell that can lead to the same issues. But GUIs do produce more friction and confirmation dialogue boxes. Terminals assume you know what you want to do. Typing it is the confirmation.

No see in windows it's fine because it takes a few more clicks

Legitimately extra friction for risky behaviors is good for security. There's a reason you have to go through an extra dialogue to run an unsigned app, or click through an SSL error. It obviously doesn't stop everyone, but it does stop plenty.