Post

i am once again begging windows users to understand that linux nerds give you instructions in the form of terminal commands because "paste this in" is a million times faster than trying to lead you through the gui one button at a time, not because the gui doesn't exist

I feel like teaching users to paste something into the terminal that they dont understand is creating an easy vector for malicious actors. A GUI cant download and run a malicious program all in one ctrl+v - Enter. Going through a GUI gives time to think and take in context clues. /1

And like, I do use the terminal and find it more efficient for some purposes. Hell my VPS I only connect w/ a terminal. But it takes an extra level of nerd. A GUI is easier to teach so they arent reliant on you, and also can screen better for malicious actions.

there is an entire industry of scams that open with "ok install this remote desktop software so i can have full control of your computer"

Yes there is. But that is just whataboutism. We arent actively teaching people to install the remote desktop apps so malicious actors then have an easier time convincing people to do it. Teaching them to paste random terminal commands opens up a new vector.

? windows has a long-standing culture of solving problems by installing random stuff from the internet. or modifying random registry keys or whatever. this is an inherent problem with getting tech support from randos and i don't think "click this stuff in the gui" is somehow inherently better

people should not paste terminal commands willy-nilly, no, but they shouldn't do *anything* willy-nilly. but then how do they solve complicated problems before they know what they're doing? i don't have a good answer for that. the windows answer is "yeehaw" but when linux does it now it's bad

0 reposts16 likes

there are other people in this thread talking about the same thing happening *on windows* with powershell commands too

the nice thing about shell commands is that you can at least in principle look up each bit individually. i don't think there's like comprehensive documentation of registry keys, and the help for individual buttons in a dialog often assumes you already know all the other context

it's also easier to run a line of shell by a third party than it is to say "ok i'm about to click this button in this dialog, is that bad"

yeah i'm thinking about that scam going around that's basically "paste this in terminal" framed as a "captcha", and this criticism is so weird in that light, as if people don't blindly follow instructions of all kinds already

Right some people do, but obviously not all people. So then the next question is how do we reduce that number yes? Part of that is increasing the average persons computer hygiene, which typically includes not running random scripts off the internet.

I wonder if this has to do with the ways that powershell was designed to be Rounder and Dumber than a unix terminal? Or it could just be that people trust it because it's Windows-ified, that is pretty much the whole trust system on that OS after all

Ya, its not a linux specific issue. Windows has powershell that can lead to the same issues. But GUIs do produce more friction and confirmation dialogue boxes. Terminals assume you know what you want to do. Typing it is the confirmation.

Generally in a gui, there are save, or input field or all sorts of interactions that need to happen to accomplish a task. This slows down the process. It gives the user more time to think and process what things are doing. There's a reason a big part of scams is urgency.

You want the victim to fall for it before they have a chance to pull back. Nothing is going to be perfect, but there's a reason why theres a reason why many things introduce extra friction when doing potentially risky things.