<story><title>Show HN: ffmpeg-english &quot;capture from /dev/video0 every 1 second to jpg files&quot;</title><url>https://github.com/dheera/scripts/blob/master/ffmpeg-english</url></story><parent_chain><item><author>bonyt</author><text>If you want this to be a &lt;i&gt;little&lt;/i&gt; safer, instead of just those guardrails to prevent semicolons and such, you can split the command into an array of arguments, and use subprocess.Popen.  It won&amp;#x27;t execute through a shell, so you don&amp;#x27;t have to worry about shell injection[1].  Though I&amp;#x27;m sure there are unsafe ways to invoke ffmpeg anyway.&lt;p&gt;[1]: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;docs.python.org&amp;#x2F;3&amp;#x2F;library&amp;#x2F;subprocess.html#security-considerations&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;docs.python.org&amp;#x2F;3&amp;#x2F;library&amp;#x2F;subprocess.html#security-c...&lt;/a&gt;</text></item></parent_chain><comment><author>jan_Sate</author><text>I&amp;#x27;d rather manually review all AI-generated command before running it.</text></comment>
<story><title>Show HN: ffmpeg-english &quot;capture from /dev/video0 every 1 second to jpg files&quot;</title><url>https://github.com/dheera/scripts/blob/master/ffmpeg-english</url></story><parent_chain><item><author>bonyt</author><text>If you want this to be a &lt;i&gt;little&lt;/i&gt; safer, instead of just those guardrails to prevent semicolons and such, you can split the command into an array of arguments, and use subprocess.Popen.  It won&amp;#x27;t execute through a shell, so you don&amp;#x27;t have to worry about shell injection[1].  Though I&amp;#x27;m sure there are unsafe ways to invoke ffmpeg anyway.&lt;p&gt;[1]: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;docs.python.org&amp;#x2F;3&amp;#x2F;library&amp;#x2F;subprocess.html#security-considerations&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;docs.python.org&amp;#x2F;3&amp;#x2F;library&amp;#x2F;subprocess.html#security-c...&lt;/a&gt;</text></item></parent_chain><comment><author>ajsnigrutin</author><text>I&amp;#x27;m pretty sure you can dump a stream without transcoding directly to a file, and the stream can be sourced from an url, and the destination file can be users ssh authorized_keys</text></comment>