Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: A fork of sudo with Touch ID support

github.com

Post reply on HN
Print view View original

111–120 of 134 posts

Re: Show HN: A fork of sudo with Touch ID support

#111

Post by stephenr »

robinson7d wrote: post #109
stephenr wrote: post #99

Earlier quoted context omitted.

Remind me again how function keys can produce full colour multitouch interfaces, such as video/image scrubbers, colour pickers, etc. The standard "function keys can do anything" response is getting old.

> The standard "function keys can do anything" response is getting old. That "function keys can do anything" is, in my opinion, the exact reason they had to go. They're scary for the typical user. What is F7? You may know, but it's not obvious in any way. That some of them cause destructive actions (e.g. Alt+F4 on Windows) makes it worse - they're scary to many users. And even when after figuring out what some of the…

Exactly. Particularly once you jump between a few apps, and as I said elsewhere, I can't use media/volume/display controls and f-keys without the function key, so I don't use the f-keys on my existing MBP.

Haptic feedback would be interesting..

Re: Show HN: A fork of sudo with Touch ID support

#113

Post by robinson7d »

stephenr wrote: post #111
robinson7d wrote: post #109

Earlier quoted context omitted.

> The standard "function keys can do anything" response is getting old. That "function keys can do anything" is, in my opinion, the exact reason they had to go. They're scary for the typical user. What is F7? You may know, but it's not obvious in any way. That some of them cause destructive actions (e.g. Alt+F4 on Windows) makes it worse - they're scary to many users. And even when after figuring out what some of the…

Exactly. Particularly once you jump between a few apps, and as I said elsewhere, I can't use media/volume/display controls and f-keys without the function key, so I don't use the f-keys on my existing MBP. Haptic feedback would be interesting..

The way that for the last couple generations the touchpad hasn't actually "clicked", and been simulated by haptic feedback. That same feeling on the Esc/Cancel/etc. virtual button would alleviate most of my personal concerns.

I'm surprised they didn't include it given how much they've been pushing it on iOS, as well as on the touchpad of Macs.

Re: Show HN: A fork of sudo with Touch ID support

#114

Post by acdha »

monkmartinez wrote: post #84
intruder wrote: post #82

Earlier quoted context omitted.

I don't understand the general moan about the touch bar. These are exactly the cases I think will make the touch bar great. Is it the most innovative concept ever? No, but it looks like it's been executed very well. I think developers will like this macbook.

With PyCharm and most Jetbrains IDEs I can remap keys to run test. So pressing two or three keys will run tests AND!!! I don't have to look at my keyboard to run the tests NOR see the results.

… and you can continue to do that just fine.

Meanwhile, the other 90% of users will probably love it when their IDE, profiler, every browser's developer tools, etc. can display context-appropriate labels so they don't need to remember what F8 does in the current mode of the current application.

Re: Show HN: A fork of sudo with Touch ID support

#116

Post by duaneb »

striking wrote: post #105
duaneb wrote: post #88

Earlier quoted context omitted.

To what exact cases are you referring? Do you not use an ide with a test runner? What exactly is desirable about triggering and monitoring this from a second display on the keyboard--where you're looking all the time, naturally--over clicking a button on screen?

Take a good look at the IDE running there. It's Vim. I use that all the time, and so do many other people on HN. Do you need a button like this on your keyboard? No, you could set up a new Vim bind. But this is more dynamic; what if the test re-run buttons were only visible after having modified a file, and replaced with a deploy or commit button if tests succeed? If you're vigorously opposed to it, don't buy a Mac.…

The computer already has a fantastic dynamic display built in—the display. Your eyes even naturally fall there. Why do we need a second display at all, much less on the keyboard where people do not look?

Re: Show HN: A fork of sudo with Touch ID support

#117

Post by conradev »

pasyormie wrote: post #100
sjtgraham wrote: post #92

I have a feeling this is EXTREMELY DANGEROUS to have on your Mac. Using DYLD_INSERT_LIBRARIES and attacker could inject code that swizzles -[LAContext evaluatePolicy: localizedReason:reply] to always invoke the callback block with success set to YES. e.g. DYLD_FORCE_FLAT_NAMESPACE=1 DYLD_INSERT_LIBRARIES=evil.dylib my_sudo rekt This won't work on SIP protected binaries (n.b. system binaries), but might still work on…

This would not work. setuid binaries do not respect these flags, for obvious reasons. But if you're at the point where you can inject environment vars into a devs workstation, it's probably too late for that dev.

Apps can also opt-in to only load dynamic libraries with the same Team ID, or signer:

https://developer.apple.com/library/content/documentation/Se...

Re: Show HN: A fork of sudo with Touch ID support

#118

Post by tkxxx7 »

duaneb wrote: post #116
striking wrote: post #105

Earlier quoted context omitted.

Take a good look at the IDE running there. It's Vim. I use that all the time, and so do many other people on HN. Do you need a button like this on your keyboard? No, you could set up a new Vim bind. But this is more dynamic; what if the test re-run buttons were only visible after having modified a file, and replaced with a deploy or commit button if tests succeed? If you're vigorously opposed to it, don't buy a Mac.…

The computer already has a fantastic dynamic display built in—the display. Your eyes even naturally fall there. Why do we need a second display at all, much less on the keyboard where people do not look?

Unless you're touch-typing your function keys, you certainly do look there.

I don't want a "second display"; I want dynamic, context-aware buttons. Focusing on the fact that it's "another display" misses all the benefits of it not being static hardware buttons.

Re: Show HN: A fork of sudo with Touch ID support

#119

Post by Nullabillity »

robinson7d wrote: post #113
stephenr wrote: post #111

Earlier quoted context omitted.

Exactly. Particularly once you jump between a few apps, and as I said elsewhere, I can't use media/volume/display controls and f-keys without the function key, so I don't use the f-keys on my existing MBP. Haptic feedback would be interesting..

The way that for the last couple generations the touchpad hasn't actually "clicked", and been simulated by haptic feedback. That same feeling on the Esc/Cancel/etc. virtual button would alleviate most of my personal concerns. I'm surprised they didn't include it given how much they've been pushing it on iOS, as well as on the touchpad of Macs.

Oh wow, I guess that's why Mac touchpads feel so impressively sluggish to click.

Re: Show HN: A fork of sudo with Touch ID support

#120

Post by altendo »

tomphoolery wrote: post #91
pritambaral wrote: post #3

Similar: On Linux, doing something like this doesn't require patched sudo. sudo uses the OS provided auth framework (PAM), which is pluggable (the 'P' in 'PAM' stands for 'Pluggable'); and fprintd provides a pam plugin. The `LocalAuthentication` framework this project mentions sounds like an OS X equivalent of PAM — an OS level account auth framework. I wonder why/if the `sudo` on OS X doesn't use it.

From the README... "While not useful in practice, you can use this to verify that the LocalAuthentication code does in fact work." Almost seems like the author just wrote it to test the LocalAuthentication framework in the real world.

Even better quote:

> While I am using this as a fun experiment on my personal computer, your security needs may vary.

So yes, this is a toy system. Cool concept, but not something you probably want around in production/secure environment, which I assume most people would know not to do.

Post reply on HN