Similarly for WSL2 using Windows Hello:
Use Touch ID for Sudo on Mac
91–100 of 221 posts
Re: Use Touch ID for Sudo on Mac
#92As a side note, there's also the wonderful pam_yubiko module that allows you to require touching your yubikey to sudo or login.
pam_yubico yes.
You can also use this to secure SSHD on servers by delegating to PAM with keyboard-interactive.
I'm waiting for U2F OpenSSH support to trickle down to stable distros but in the meantime pam_yubico is pretty damn good... not to mention you don't have to worry about terminal support since it relies on the yubikey OTP emulating a keyboard.
Re: Use Touch ID for Sudo on Mac
#93Earlier quoted context omitted.
So your qualm is low quality biometric scanning, not biometrics itself? So we agree that biometrics are the most secure form of authentication and we are only debating on the quality of the technology, which we know is getting better day by day, yeah?
> Further, if I take a high resolution photo of you, and then go to your mom and ask for money by presenting her the picture, she won't accept that picture as proof that I am you (although she may suspect I'm blackmailing or otherwise threatening you). This, moreso than qualms about the resolution/quality of the sensor is the GP's point. If the sensors are accurate, that specific set of bits that is translated as you…
It rather sounds to me like you have run out of arguments.
Re: Use Touch ID for Sudo on Mac
#94Does anybody know if there's a solution for keychain password copy too? I have a very complicated vpn password that I change often (so I don't remember it), but each day, when connecting to the vpn, I have to open keychain and type my user password to get the vpn password. I couldn't find a way to use touch id for that.
Out of curiousity why do you change a complex password regularly? Is this something your evilCorp policy forces you to do, or something you do out of habit because of something you read on the internet, or even rote habit from something picked up at previous evilCorp policies?
Re: Use Touch ID for Sudo on Mac
#95This is amazing -- but every. single. update. disables it again Why does the sudo file not persist between updates? This case is quite minor for personal computers, but what about companies that log in with yubikeys or smart cards? Do they have to reconfigure after every update too?
I’ve just added this to my .bash_profile: enable-sudo-touchid() { sudo sed -i -e '1s;^;auth sufficient pam_tid.so\n;' /etc/pam.d/sudo } But probably automating the check (if the automated checker has the correct permission) would not be that hard.
The hard part with these kinds of fixes is that they evaluate every time you create a new shell or tab, which for me is very frequently.
It’s already starting to add noticeable latency from all of the various eval statements in there.
Edit: I missed it’s a function def which should be fine speed wise.
Re: Use Touch ID for Sudo on Mac
#96Earlier quoted context omitted.
shift Z Z is faster.
Debatable and depends on length of time shortcut has been in use. I can type :wq like a madman. My finger can slide straight from w to q, whereas with double-z, I have to pick my finger up and put it back down. So much movement! What next, you want me to run a marathon?
I’ve typed in :wq! so often I sometimes accidentally type it in when trying to do things like close browser tabs or exit programs.
Re: Use Touch ID for Sudo on Mac
#97Earlier quoted context omitted.
You have to take your fingers off the keyboard for this which is a big distractor, worse than using a mouse. I use this feature for other touch cases (e.g. unlocking 1Password) but would hate it when in the flow. Admittedly my password is well wired into my fingers.
If you use your little finger RHS print as a reference, perhaps that won't be too bad? On the keyboard it seems fairly reachable. I haven't tried it myself ...
The fact it is the last key in the first row makes it easy to find by touch without looking at it. Just like regular touch typing, it becomes habitual/muscle memory.
I haven't used a full size keyboard in so long, I had to think about the print reference. I have lost direct placement of Home/Print Screen/End type button locations in my memory. To be more accurate to the keyboard in question, it is a slight extension past the delete key. The only hazard is if you come up short, you might bring up Siri (depending on touchbar mode) which is an even bigger distraction.
Re: Use Touch ID for Sudo on Mac
#98This is amazing -- but every. single. update. disables it again Why does the sudo file not persist between updates? This case is quite minor for personal computers, but what about companies that log in with yubikeys or smart cards? Do they have to reconfigure after every update too?
This is a very macOS problem. Why does it reset every preference on updates? The one that kills me is wake-on-lan, that gets turned back on regardless. Hate!
Re: Use Touch ID for Sudo on Mac
#99This is amazing -- but every. single. update. disables it again Why does the sudo file not persist between updates? This case is quite minor for personal computers, but what about companies that log in with yubikeys or smart cards? Do they have to reconfigure after every update too?
curl -sL https://gist.githubusercontent.com/RichardBronosky/31660eb4b... | bash This helps.
This "download random script from internet and execute" thing is a terrible idea, even moreso to put in bash_profile...
Re: Use Touch ID for Sudo on Mac
#100If you run things under tmux, you'll also need this: https://github.com/fabianishere/pam_reattach
Ah, thanks! Was wondering why it wasn't working in tmux.