Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Remember that time Valve had a bug in Steam for Linux that would wipe the user's hard drive? [1]

Counter-point:

* Let's be honest, Linux is not a first class gaming platform. Linux is not going to be Steam's #1 platform. Whereas here it's an Adobe product on OSX.

* The Steam bug was triggered by the user moving ~/.local/share/steam. That's not something that users will be doing regularly. Whereas this Adobe bug wasn't caused by any uncommon behaviour.

> Developers don't have them because they understand the unix way and know they shouldn't be putting files there.

Developers are very definitly going to have dot-files. .ssh, .vim, .bashrc, .local, .gnome, .mozilla, etc. etc. If something wiped my SSH private keys on my desktop, that would be a massive problem.



Perhaps a bit pedantic (HN!) ... We may be remembering a different bug but wasn't the steam bug a failure to check that a variable existed before using it to complete a directory that was to be deleted.

The variable was empty when a user moved steamroot but that would have been fine with proper input checking - also there were probably other scenarios where that failure soul result in catastrophe too.

http://m.theregister.co.uk/2015/01/17/scary_code_of_the_week...


  Developers are very definitly going to have dot-files. .ssh
The article only mentions the system root directory, never the user's home folder. If you're storing your ssh keys in your system root directory, you're doing something very unusual.


I'll be running chattr +i on my private keys when I get a chance. I wonder why that bit isn't set by default?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: