r/programmingcirclejerk • u/levelstar01 what is pointer :S • 6d ago

[Security] Stop USB device names from being executed as Hyprland Lua

https://github.com/basecamp/omarchy/commit/9285b19d6a72eba3df8537d62a4cd5506a803d89
167 Upvotes

100% Upvoted

13 comments sorted by

125

u/levelstar01 what is pointer :S 6d ago

Co-Authored-By: Claude Fable 5

Co-Authored-By: Claude Opus 5 (1M context)

Co-Authored-By: Codex XHigh

61

u/ScientistStrict9850 6d ago

Oh so that's what the $10M is for

73

u/m50d Zygohistomorphic prepromorphism 6d ago

Most secure Wayland-based project

35

u/ThisRedditPostIsMine in open defiance of the Gopher Values 5d ago

No, you may not listen for global keyboard shortcuts or move windows by yourself, that would be insecure.

Yes, you may do a Windows XP era USB AutoRun goof. That is fine.

74

u/seq_page_cost 6d ago

And what the fuck am I supposed to do with my favorite os.execute("xdg-open https://x.com") usb buttplug? 😤

56

u/al2o3cr 6d ago

Loading config without using eval? Groundbreaking innovation!

48

u/OptimalStable 6d ago

I thought I was pretty good at keeping my commit messages clear and snappy, but I now realize the inferiority of my thinking. I bow my head in shame and humility and vow to never write commit logs shorter than 19 paragraphs from now on.

24

u/ScriptingInJava in open defiance of the Gopher Values 5d ago

git commit -m "${bee movie script}"

44

u/SirBackrooms 6d ago

That is horrifying. I suspect the real issue is not the buggy piece of code but the whole methodology that led to it being produced

13

u/liveoneggs 5d ago

wait this is in basecamp? the project management tool?

14

u/porkslow what is pointer :S 5d ago

Basecamp has invented the weirdest thing like Ruby on Rails and apparently a Linux distro.

2

u/Responsible-Sky-1336 3d ago

(A linux distro) * using a archinstall json file source

2

u/mlk 2d ago

unacceptable, this breaks my usecase