a little bit of security
os.system -> subprocess.call