Live data from Hacker News

🥺: the best sudo replacement

xeiaso.net

211–220 of 559 posts

Re: 🥺: the best sudo replacement

#212

The first time I saw perfectly valid Unicode take down an RSS reader (in ~2003), it was an ü that did it. I have taken to calling that the kaboomlaut in unit tests.

The are quite a lot of "gotchas" with passwords being Unicode though. One of my favourite tricks is to include a null byte in passwords and see what happens. Sudo treats it as the end of the string. Passwd gives "token manipulation error" and nopes out. Many websites seem to fail in interesting ways...

[deleted]

Re: 🥺: the best sudo replacement

#213

I replaced "sudo" in all my systems a long time ago with an alias to "machinectl shell .host" which is IMHO far superior to it, as it doesn't just spawn a new shell as a privileged process, but instead initializes a full user-session and then spawns a shell in this user-session. This doesn't carry the risk of tainting the new session with the context of the initiating shell (pwd, env, ...) and doesn't only feel like…

This is going way over my head. Am I the only one here who just puts everyone in sudoers and does NOPASSWD? Where are these multi-user systems where you don't really trust everyone who has access?

Re: 🥺: the best sudo replacement

#214
post #101

Earlier quoted context omitted.

They didn’t write in paragraphs, it is more like a collection of IRC posts or something. Here’s the whole post thingy: > God I wish they did. They wrote the program in C, (as far as I can tell) have no intention of rewriting it in Rust, and it's had many viable attacks over the years that allowed attackers to gain root privileges and worse. It's also debatable if the entire concept of privilege separation as implemen…

It's obviously a (failed) attempt to be funny by being very sarcastic. No one is stupid enough to this that writing it in Rust was even an option in the days unix was written - especially considering the types of people that would know how to write C and Rust for kernels.

They do believe it should be rewritten in Rust:

> The part about being annoyed that sudo is still written in C is coming from a sense of exasperation that there's still more predictable memory safety bugs involved with sudo because it's still written in C.

Re: 🥺: the best sudo replacement

#215
post #196

Earlier quoted context omitted.

I think the website is excellent, and it’s a joy every time I see Xe’s posts here or anywhere. If you don’t like the way it’s presented, but you do sincerely want more information on the topic it presents, there is a vast (world wide!) web full of information. Surely you’ll have better luck finding it if you look for it rather, than spending that time trashing something that isn’t your cup of tea.

If you configure your content blocker to hide the picture element, all the furries go away.

I think (hope) this is for the other poster and others of a similar mind, but in case I flubbed saying so: I think your site and its furry content is rad, and do not personally want to see anything different.

Re: 🥺: the best sudo replacement

#216

Earlier quoted context omitted.

I think the website is excellent, and it’s a joy every time I see Xe’s posts here or anywhere. If you don’t like the way it’s presented, but you do sincerely want more information on the topic it presents, there is a vast (world wide!) web full of information. Surely you’ll have better luck finding it if you look for it rather, than spending that time trashing something that isn’t your cup of tea.

[flagged]

Why?

Re: 🥺: the best sudo replacement

#217
post #24

For anyone wondering, this is basically a young millennial / gen z meme. The emoji is usually pronounced "pwease", as in a childlike pronunciation of "please" Therefore the command is basically just asking very nicely, hoping to get one's way edit. source: dude just trust me

I don't know if it's ironic or not but there is also a sudo replacement in Rust that is called "please" https://gitlab.com/edneville/please

Depending on your temperament, you might prefer https://github.com/nvbn/thefuck

    $ apt-get install vim
    E: Could not open lock file /var/lib/dpkg/lock - open (13: Permission denied)
    E: Unable to lock the administration directory (/var/lib/dpkg/), are you root?

    $ fuck
    sudo apt-get install vim
    [sudo] password for nvbn:
    Reading package lists... Done

Re: 🥺: the best sudo replacement

#218
post #137
post #88

Earlier quoted context omitted.

Using key-based auth without encrypting the key with a password sounds like a bad idea, as then any program running on the host can trivially gain root privileges.

Any program running as your user on your personal machine can trivially gain root privileges, by dropping a program called "sudo" in your personal PATH, putting a "sudo" command in your .bashrc, man-in-the-middle a shell (how do you know that last command actually completed?), or hijacking any of the graphical programs that trivially ask you for your UNIX password to do anything (Discord/Slack/... updater, Steam, ...…

When do any of those programs ask you for your password? I've never had any of them ask for my Unix password, ever. Is that just a macOS thing with self-updaters?

Re: 🥺: the best sudo replacement

#219

Earlier quoted context omitted.

Feeling yellow and looking down? No idea what that's supposed to mean

Looking up.

Depending on font. Inside my web browser, it appears to be looking up. On my web browser's title bar (so rendered by my window manager...), it appears to be looking down, or maybe straight forward. Fonts make a big difference on interpretation too.

I remember a few years back, there was a problem where Apple implemented "GRINNING FACE" in such a way that Apple users interpreted it as a sarcasm indicator, but most others would look just like a standard smiling face, leading to quite a number of awkward exchanges when non-Apple users would read things such as "Yes, let's burn it all down :)" instead of "Yes, let's burn it all down :|"

Post reply on HN