I have not said this is dangerous. I’ve pointed out it is dangerous to execute a command without knowing what it do.
But now I am a little confused.
If you put the SD Card into your Debian system, copy the download file on the vard, you need +w on /media/user/sdcard (if your user is named user and the SD card is named sdcard, as in the link).
If you are using qFlipper, it will download the firmware to [I really don’t know, but we can take a look into the source, if this is any important for this]. This place needs write access. I don’t think this will be /media, because this path is for other purposes, according to Linux Filesystem Hierarchy. I would assume it is something like ~/Downloads or $TEMP.
I wrote this because some people may do more often a FW upgrade the manual way. I don’t see why the user should have write access to /media/user, since I seldom plug in SD Cards without the intend to write data.
If I would assume someone do a data exfiltration, I would block card reader over idea rules … But all this is not the issue here.
I appreciate your post. You’ve got an issue and shared a solution. I would not dare to criticise this step. Thanks for that.