🥺: the best sudo replacement
211–220 of 559 posts
Re: 🥺: the best sudo replacement
#212The first time I saw perfectly valid Unicode take down an RSS reader (in ~2003), it was an ü that did it. I have taken to calling that the kaboomlaut in unit tests.
The are quite a lot of "gotchas" with passwords being Unicode though. One of my favourite tricks is to include a null byte in passwords and see what happens. Sudo treats it as the end of the string. Passwd gives "token manipulation error" and nopes out. Many websites seem to fail in interesting ways...
Re: 🥺: the best sudo replacement
#213I replaced "sudo" in all my systems a long time ago with an alias to "machinectl shell .host" which is IMHO far superior to it, as it doesn't just spawn a new shell as a privileged process, but instead initializes a full user-session and then spawns a shell in this user-session. This doesn't carry the risk of tainting the new session with the context of the initiating shell (pwd, env, ...) and doesn't only feel like…
Re: 🥺: the best sudo replacement
#214Earlier quoted context omitted.
They didn’t write in paragraphs, it is more like a collection of IRC posts or something. Here’s the whole post thingy: > God I wish they did. They wrote the program in C, (as far as I can tell) have no intention of rewriting it in Rust, and it's had many viable attacks over the years that allowed attackers to gain root privileges and worse. It's also debatable if the entire concept of privilege separation as implemen…
It's obviously a (failed) attempt to be funny by being very sarcastic. No one is stupid enough to this that writing it in Rust was even an option in the days unix was written - especially considering the types of people that would know how to write C and Rust for kernels.
> The part about being annoyed that sudo is still written in C is coming from a sense of exasperation that there's still more predictable memory safety bugs involved with sudo because it's still written in C.
Re: 🥺: the best sudo replacement
#215Earlier quoted context omitted.
I think the website is excellent, and it’s a joy every time I see Xe’s posts here or anywhere. If you don’t like the way it’s presented, but you do sincerely want more information on the topic it presents, there is a vast (world wide!) web full of information. Surely you’ll have better luck finding it if you look for it rather, than spending that time trashing something that isn’t your cup of tea.
If you configure your content blocker to hide the picture element, all the furries go away.
Re: 🥺: the best sudo replacement
#216Earlier quoted context omitted.
I think the website is excellent, and it’s a joy every time I see Xe’s posts here or anywhere. If you don’t like the way it’s presented, but you do sincerely want more information on the topic it presents, there is a vast (world wide!) web full of information. Surely you’ll have better luck finding it if you look for it rather, than spending that time trashing something that isn’t your cup of tea.
[flagged]
Re: 🥺: the best sudo replacement
#217For anyone wondering, this is basically a young millennial / gen z meme. The emoji is usually pronounced "pwease", as in a childlike pronunciation of "please" Therefore the command is basically just asking very nicely, hoping to get one's way edit. source: dude just trust me
I don't know if it's ironic or not but there is also a sudo replacement in Rust that is called "please" https://gitlab.com/edneville/please
$ apt-get install vim
E: Could not open lock file /var/lib/dpkg/lock - open (13: Permission denied)
E: Unable to lock the administration directory (/var/lib/dpkg/), are you root?
$ fuck
sudo apt-get install vim
[sudo] password for nvbn:
Reading package lists... DoneRe: 🥺: the best sudo replacement
#218Earlier quoted context omitted.
Using key-based auth without encrypting the key with a password sounds like a bad idea, as then any program running on the host can trivially gain root privileges.
Any program running as your user on your personal machine can trivially gain root privileges, by dropping a program called "sudo" in your personal PATH, putting a "sudo" command in your .bashrc, man-in-the-middle a shell (how do you know that last command actually completed?), or hijacking any of the graphical programs that trivially ask you for your UNIX password to do anything (Discord/Slack/... updater, Steam, ...…
Re: 🥺: the best sudo replacement
#219Earlier quoted context omitted.
Feeling yellow and looking down? No idea what that's supposed to mean
Looking up.
I remember a few years back, there was a problem where Apple implemented "GRINNING FACE" in such a way that Apple users interpreted it as a sarcasm indicator, but most others would look just like a standard smiling face, leading to quite a number of awkward exchanges when non-Apple users would read things such as "Yes, let's burn it all down :)" instead of "Yes, let's burn it all down :|"