You two are both doing the "ATM machine" thing. (PAM = Pluggable Authentication Module)
"Written as a PAM" sure feels wrong on the lips, though.
Show HN: A fork of sudo with Touch ID support
11–20 of 134 posts
Re: Show HN: A fork of sudo with Touch ID support
#12Shouldn't touch ID be the userid and not the password?
I'm not sure that's true. Anyone can claim to be "rrmm" but only one person has that set of fingerprints.
Re: Show HN: A fork of sudo with Touch ID support
#13This sounds amazing, and Id love if Apple allowed touchid for regular account-password prompts in macOS 10.13 (or a Sierra point update but let's be realistic) If they integrated this down to the built in sudo/su that would be even more amazing, but I imagine that's much less likely.
It is already the case. In the keynote, they demoed Fast User Switch with a touch of finger. If multiple people share a single computer, switching to the right user account is a touch away.
Re: Show HN: A fork of sudo with Touch ID support
#14I never understood the obsession with sudo. Why not just be root in the first place?
Re: Show HN: A fork of sudo with Touch ID support
#15Why does macOS need sudo to boot?
Re: Show HN: A fork of sudo with Touch ID support
#16I never understood the obsession with sudo. Why not just be root in the first place?
You're running code you didn't write or entirely read yourself.
Re: Show HN: A fork of sudo with Touch ID support
#17I never understood the obsession with sudo. Why not just be root in the first place?
Maybe better approach is to make stuff not require sudo in the first place.
Re: Show HN: A fork of sudo with Touch ID support
#18I never understood the obsession with sudo. Why not just be root in the first place?
Isolate your concerns and risks. There's no reason to drop into an interactive root shell for a single command, and your chances of forgetting your current privilege level and running the wrong thing are not insignificant.
Re: Show HN: A fork of sudo with Touch ID support
#19Shouldn't touch ID be the userid and not the password?
I'm not sure that's true. Anyone can claim to be "rrmm" but only one person has that set of fingerprints.
I certainly agree that a fingerprint is a much greater claim to an identity than a username. 'Casually' of course fingerprints work fine for auth, but fingerprints can and have been reproduced. Technology may alleviate that issue eventually, and you could argue that all auth methods have their issues.
The bigger issue I see is that 'rrmm' is an identity I assumed. I have many different identities. I only have one set of finger prints. (Fingerprinting to unlock a local store of keys would fix some of this problem, but I am fond of plausible deniablity in identification).
Re: Show HN: A fork of sudo with Touch ID support
#20[deleted]