Live data from Hacker News

🥺: the best sudo replacement

xeiaso.net

51–60 of 559 posts

Re: 🥺: the best sudo replacement

#51

For some more serious alternatives, I have heard of many people finding doas to be a drop in replacement. Furthermore, I've heard some people suggest neither doas nor sudo, but instead using an SSH server to gain root access to your local machine. It could listen on localhost and use key-based auth to allow root logins...

I used the SSH server method for a while on a Windows machine since it's built in Terminal doesn't support mixed security contexts between tabs/panes.

Re: 🥺: the best sudo replacement

#52

I know I'm an old fart but this is yet another reason why I don't want my servers supporting UTF-8. LC_ALL=C It's important and NECESSARY to be inclusive, and as long as nginx can still provide the UTF-8 characters I don't care; but there is no way I can allow anything other then US ASCII to be on the terminal.

Unfortunately, the C locale will not achieve your goal: UTF-8 will be merely a subset of what you support, rather than getting rid of it.

Re: 🥺: the best sudo replacement

#53
post #24

For anyone wondering, this is basically a young millennial / gen z meme. The emoji is usually pronounced "pwease", as in a childlike pronunciation of "please" Therefore the command is basically just asking very nicely, hoping to get one's way edit. source: dude just trust me

A appreciate you 'describing' the emoji for me. I'm on the spectrum, and I can't tell 99% of these things apart. Looks like a sad face to me. no different then the 500 other sad face emoji's I find. I'll stick with =(

> I'm on the spectrum, and I can't tell 99% of these things apart. Looks like a sad face to me. no different then the 500 other sad face emoji's I find. I'll stick with =(

If it's any consolation, I don't think anyone could infer that from the emoji itself. The meaning is like a subculture's slang.

I don't use emojis, so I only know the very basic ones (which I consider to be obfuscated emoticons).

Re: 🥺: the best sudo replacement

#54

Earlier quoted context omitted.

A appreciate you 'describing' the emoji for me. I'm on the spectrum, and I can't tell 99% of these things apart. Looks like a sad face to me. no different then the 500 other sad face emoji's I find. I'll stick with =(

Wait what, this is some kind of emoji/face? It shows up as a grey solid box that is slightly wider than tall for me, so not even the typical "glyph missing" thing... Edit: ok apparently this is indeed the placeholder for missing emoji in Firefox for Android at least.

This one: https://emojipedia.org/pleading-face/

Re: 🥺: the best sudo replacement

#55
post #24

For anyone wondering, this is basically a young millennial / gen z meme. The emoji is usually pronounced "pwease", as in a childlike pronunciation of "please" Therefore the command is basically just asking very nicely, hoping to get one's way edit. source: dude just trust me

The meaning can also be inferred from… the face.

If I zoom in, maybe. At default text sizes, it's indistinguishable from all other emoji faces for me.

Re: 🥺: the best sudo replacement

#56
post #24

For anyone wondering, this is basically a young millennial / gen z meme. The emoji is usually pronounced "pwease", as in a childlike pronunciation of "please" Therefore the command is basically just asking very nicely, hoping to get one's way edit. source: dude just trust me

A appreciate you 'describing' the emoji for me. I'm on the spectrum, and I can't tell 99% of these things apart. Looks like a sad face to me. no different then the 500 other sad face emoji's I find. I'll stick with =(

It's U+1F97A, FACE WITH PLEADING EYES.

Re: 🥺: the best sudo replacement

#57

For some more serious alternatives, I have heard of many people finding doas to be a drop in replacement. Furthermore, I've heard some people suggest neither doas nor sudo, but instead using an SSH server to gain root access to your local machine. It could listen on localhost and use key-based auth to allow root logins...

I did use ssh on localhost to do some X11 trickery once. It works surprisingly well

Re: 🥺: the best sudo replacement

#58
post #24

For anyone wondering, this is basically a young millennial / gen z meme. The emoji is usually pronounced "pwease", as in a childlike pronunciation of "please" Therefore the command is basically just asking very nicely, hoping to get one's way edit. source: dude just trust me

A appreciate you 'describing' the emoji for me. I'm on the spectrum, and I can't tell 99% of these things apart. Looks like a sad face to me. no different then the 500 other sad face emoji's I find. I'll stick with =(

> I'm on the spectrum, and I can't tell 99% of these things apart

If it's any consolation, I'm not, and I don't know exactly what a lot of the face-emojis are supposed to be expressing unless I see a text representation of them or otherwise have them explained.

Re: 🥺: the best sudo replacement

#59

I know I'm an old fart but this is yet another reason why I don't want my servers supporting UTF-8. LC_ALL=C It's important and NECESSARY to be inclusive, and as long as nginx can still provide the UTF-8 characters I don't care; but there is no way I can allow anything other then US ASCII to be on the terminal.

How would you read git log output with non-ascii author names then?

Re: 🥺: the best sudo replacement

#60
post #9
post #6

Wait? it doesn't make any sense. So any userspace program can call `setuid(0)` and `execv()`? Why is there sudo in the first place? I am not getting it.

The program needs to have the setuid bits set on its inode (chmod u+s), and be owned by root. https://en.wikipedia.org/wiki/Setuid Sudo exists as an elaborate ACL scheme implemented in user-space which takes advantage of the setuid+root permission scheme implemented in the Unix kernel to allow granularly granting root access to non-root users. But any program can be setuid and/or setgid to any user/group and it will…

Fortunately these days programs like ping can use more focused alternatives to setuid, like CAP_NET_RAW, to greatly reduce attack surface.

But also we’ve largely given up on Unix users as a security barrier in many places, instead using things like VMs as the interface between different tenants in hosting providers and clouds and such. The age of untrusted shell accounts shared Unix servers is ending, if not over already. Passwordless sudo on a cloud VM is probably the norm now.

Post reply on HN