Hacker News Reader

Comment by leetcrew | Hacker News Reader

works great until some asshole puts

  alias harikb_script='harikb_script --do-it'

in their .bashrc to eliminate this annoying step.

View on HN

I suspect someone who'd do that isn't going to take that or other precautions seriously regardless of it being aliased. It's still a problem that they're circumventing it, but I think you have a larger problem if someone with that mindset has access to production.

This would help a bit: Don't accept the "--do-it" as first parameter, make it obligatory to be the last.

  my_command() {
      command my_command "$@" --do-it
  }

Good point. Stuff like this is why I wrote "a bit". Thank you for providing an example, why it wont be enough.

If someone is a programmer and is trying to disable safety features making it slightly harder to do so doesn't really seem like the solution.

Reply on news.ycombinator.com