What if you didn't need to write back end code for your app? (opens in new tab)

(linkedrecords.com)

2 pointsWolfOliver25d ago3 comments

3 comments

I don't like that the first step in the tutorial, before they even explain what this thing is, is "execute our arbitrary code on your machine"

> Start the LinkedRecords backend locally with a single command (requires Docker)

> docker compose -p linkedrecords -f https://github.com/wolfoo2931/linkedrecords.git#main:docker-... up

(I didn't know docker-compose could take arbitrary URLs like that. cool. `curl | sudo bash` is old-school I guess?)

for every 1 legit use of starting off a blog post with those instructions, I can think of N that would be malicious or scammy in some way.

WolfOliverOP25d ago

You a free to inspect the yaml file which will be passed into the docker compose.

Also it is not as dramatic as it looks like as docker compose will just start containers. All the potentially malicious code will be run in containers.

WolfOliverOP25d ago

Would you be less sceptical if the tutorial would use a publicly hosted instance?

j / k navigate · click thread line to collapse

3 comments

evil-olive25d ago

I don't like that the first step in the tutorial, before they even explain what this thing is, is "execute our arbitrary code on your machine"

> Start the LinkedRecords backend locally with a single command (requires Docker)

> docker compose -p linkedrecords -f https://github.com/wolfoo2931/linkedrecords.git#main:docker-... up

(I didn't know docker-compose could take arbitrary URLs like that. cool. `curl | sudo bash` is old-school I guess?)

for every 1 legit use of starting off a blog post with those instructions, I can think of N that would be malicious or scammy in some way.

WolfOliverOP25d ago

You a free to inspect the yaml file which will be passed into the docker compose.

Also it is not as dramatic as it looks like as docker compose will just start containers. All the potentially malicious code will be run in containers.

WolfOliverOP25d ago

Would you be less sceptical if the tutorial would use a publicly hosted instance?

j / k navigate · click thread line to collapse