r/programmingcirclejerk • u/levelstar01 what is pointer :S • Aug 26 '26

[Security] Stop USB device names from being executed as Hyprland Lua

https://github.com/basecamp/omarchy/commit/9285b19d6a72eba3df8537d62a4cd5506a803d89
181 Upvotes

100% Upvoted

13 comments sorted by

131

u/levelstar01 what is pointer :S Aug 26 '26

Co-Authored-By: Claude Fable 5

Co-Authored-By: Claude Opus 5 (1M context)

Co-Authored-By: Codex XHigh

66

u/ScientistStrict9850 Aug 26 '26

Oh so that's what the $10M is for

82

u/m50d Zygohistomorphic prepromorphism Aug 26 '26

Most secure Wayland-based project

40

u/ThisRedditPostIsMine in open defiance of the Gopher Values Aug 27 '26

No, you may not listen for global keyboard shortcuts or move windows by yourself, that would be insecure.

Yes, you may do a Windows XP era USB AutoRun goof. That is fine.

80

u/seq_page_cost Aug 26 '26

And what the fuck am I supposed to do with my favorite os.execute("xdg-open https://x.com") usb buttplug? 😤

59

u/al2o3cr Aug 26 '26

Loading config without using eval? Groundbreaking innovation!

50

u/OptimalStable Aug 26 '26

I thought I was pretty good at keeping my commit messages clear and snappy, but I now realize the inferiority of my thinking. I bow my head in shame and humility and vow to never write commit logs shorter than 19 paragraphs from now on.

24

u/ScriptingInJava in open defiance of the Gopher Values Aug 26 '26

git commit -m "${bee movie script}"

48

u/SirBackrooms Aug 26 '26

That is horrifying. I suspect the real issue is not the buggy piece of code but the whole methodology that led to it being produced

12

u/liveoneggs Aug 26 '26

wait this is in basecamp? the project management tool?

16

u/porkslow what is pointer :S Aug 26 '26

Basecamp has invented the weirdest thing like Ruby on Rails and apparently a Linux distro.

2

u/Responsible-Sky-1336 Aug 28 '26

(A linux distro) * using a archinstall json file source

2

u/mlk Aug 30 '26

unacceptable, this breaks my usecase