Hacker News new | ask | show | jobs
by aa-jv 267 days ago
As much as I despise the feature (security), I absolutely respect the motivation to do it. I think this is why its so refreshing - one of those itches being scratched which, sure - why not? - but then again, omfg, just no.
2 comments

It is probably a useful feature to be able to have documentation visible while you’re working in the terminal. But it does violate the concept that a program should do one thing well and nothing else, so I don’t know how I feel about it
What is the additional security hazard you see?
Yet Another Browser Attack Surface. iTerm has already had a few mishaps in the security department .. adding another layer of stack to it just increases the risk.
From what I understand it’s just a WKWebView. I’m trying to understand why the embedding of a WKWebView poses additional risk because it’s embedded in iTerm? (aside from the suggested general earlier security mishaps).
> it’s just a WKWebView.

Yes, exactly. On top of the existing iTerm2 code, multiplying the attack vector surface significantly.