sebastiancarlos

Among the 15~ million lines of codes in the GCC source code, there is a single CSS line.

Who dares to call CSS bloat now? More like GSS eh.

$ cloc gcc-13.2.0
github.com/AlDanial/cloc v 1.98  T=113.87 s (1029.7 files/s, 143776.9 lines/s)
---------------------------------------------------------------------------------------
Language                             files          blank        comment           code
---------------------------------------------------------------------------------------
C++                                  31144         610803         701522        2961450
C                                    50773         410175         635758        2033424
PO File                                 44         332336         443572         916826
Ada                                   6610         290082         396614         831278
Go                                    5347         102068         191016         769730
...
Brainf***                                1              3              4             10
Lisp                                     1              4             12              7
DOS Batch                                2              0              0              4
CSS                                      1              0              0              1
---------------------------------------------------------------------------------------
SUM:                                117256        2322548        2988111       11061312
---------------------------------------------------------------------------------------

Almost every program that we run has access to the environment, so nothing stops them from curling our credentials to some nefarious server.

Why don't we put credentials in files and then pass them to the programs that need them? Maybe coupled with some mechanism that prevents executables from reading any random file except those approved.