Content pfp
Content
@
0 reply
0 recast
2 reactions

sudo rm -rf --no-preserve-root / pfp
sudo rm -rf --no-preserve-root /
@pcaversaccio
πŸ’― - folks have asked me why I wrote my Safe transaction script (https://github.com/pcaversaccio/safe-tx-hashes-util) as pure Bash script and not eg via Python. Minimal dependency. You have to only trust Linux (and Foundry) in this case. The current world is dominated by dependency bloat. This is bad and insecure engineering. Period.
1 reply
14 recasts
61 reactions

franco pfp
franco
@francos.eth
I would argue that the review process for Linux (the kernel) and core utilities (like Bash) which is maintained by the GNU project are very different in strictness. iirc each GNU project has significant maintainer autonomy and Bash in particular is maintained by one person (I don't recall his name but he took over from Brian Fox, the original author). Thus, Bash's review process is actually less rigorous than both the Linux kernel and Python's core language.
1 reply
0 recast
1 reaction

sudo rm -rf --no-preserve-root / pfp
sudo rm -rf --no-preserve-root /
@pcaversaccio
It's not about Python here but about Python dependencies.
1 reply
0 recast
1 reaction

franco pfp
franco
@francos.eth
you could write the same script in python without dependencies other than the std lib: - Argument parsing (argparse) - HTTP requests (urllib.request or http.client) - JSON handling (json) - Structured data (dataclasses) - calling `chisel` and `cast` with subprocess I also don't know if I would call the script pure bash. It's calling chisel and cast which have dependencies and sub dependencies.
1 reply
0 recast
1 reaction

sudo rm -rf --no-preserve-root / pfp
sudo rm -rf --no-preserve-root /
@pcaversaccio
I think this is fair, however, Python would allow you to use dependencies, and that's why you would approach it differently. I'm pretty sure I would have installed a dependency to prettify the output as an example. Using Bash forces you to approach it differently IMO.
1 reply
0 recast
1 reaction

franco pfp
franco
@francos.eth
Also fair! And for what it’s worth I am aligned to your goal of minimizing dependencies. I think a lot about this too!
0 reply
0 recast
1 reaction