Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

🥺: the best sudo replacement

xeiaso.net

Post reply on HN
Print view View original

331–340 of 559 posts

Re: 🥺: the best sudo replacement

#331

Post by a_vanderbilt »

madeofpalk wrote: post #129
tux3 wrote: post #25

Earlier quoted context omitted.

Alternatively, a good chunk of my twitter feed would call this the bottom emoji, without attempting to give it a pronunciation. I don't think any particular pronunciation has consensus, but various groups of people imbue it different meanings.

as in gay bottom? first i've heard of that (as a gay internet person)

At least among Gen-Z, it's less an indicator of sexual orientation, and more so one's sexual position. I am friends with a (hetero) couple where the male is the bottom. She pegs him because that what they like. He is not attracted to men, but also does not enjoy being sexually dominant.

Re: 🥺: the best sudo replacement

#332

Post by xena »

xena wrote: post #81
tristor wrote: post #69

Earlier quoted context omitted.

Honestly, I don't think you should take anything the author of this wrote seriously, the most charitable interpretation is that most of their work is a form of satire.

Speaking as the author of the work, most of _this post_ is satire meant to make you think about the existing security boundaries involved in privilege escalation. It is a false problem. The part about being annoyed that sudo is still written in C is coming from a sense of exasperation that there's still more predictable memory safety bugs involved with sudo because it's still written in C. The comment about python-cr…

Update: after some feedback from a trusted advisor I have rephrased this conversation snippet: https://xeiaso.net/blog/%F0%9F%A5%BA#:~:text=A%20prior%20ver....

Here is the new version (same links):

> I don't know about the code quality standards of the sudo project, but overall I don't see them doing any concerted effort to try to migrate away from C and there are frequent security vulnerabilities that result in attackers getting root access anyways. I really wish the industry as a whole would take languages like Rust a bit more seriously and start actually moving towards programs being safer to use because security vulnerabilities in core infrastructure result in emergency patches. It was disappointing to see an attempt at using Rust in an important Python library torpedoed by users of obscure architectures not supporting Rust. Maybe the solution there is to use WebAssembly as a compile target instead of making everything be native code. I wouldn't wish hppa's reverse stack growth on anyone trying to write a compiler though.

Re: 🥺: the best sudo replacement

#333

Post by andai »

jowsie wrote: post #145
gumby wrote: post #87

Typing emoji is a pain, but the chat suggests that that might be an advantage: > Using this program requires you to be able to type an emoji. Most attack code is of such poor quality that they are unable to run commands named with emoji.

It's easy on Windows, just winkey+.

This launched the magnifier.

Re: 🥺: the best sudo replacement

#334

Post by yjftsjthsd-h »

sph wrote: post #99
mid-kid wrote: post #85

Earlier quoted context omitted.

Sudo's -i option is able to provide you with a shell in the same state that it'd be if it were a fresh login. I've burned this into my fingers a long time ago. Also, in most configurations you have to specifically whitelist environment variables for them to surivive a "sudo" call.

Is there another way of opening a root shell other than "sudo -i"? That's what I've been using for a decade. How do other people do it?

    sudo su -
Which also resets your environment and everything.

Re: 🥺: the best sudo replacement

#335

Post by rom-antics »

dang wrote: post #297
chungy wrote: post #109

Earlier quoted context omitted.

Well, now we're gonna get nitpicky :) Unicode is plain text, therefore emoji are in the set qualified as "plain text." "ASCII text" may be more accurate.

ASCII text would be less accurate I'm afraid. I'm open to suggestions!

HN is basic-multilingual-plane-obsessive by design. As a bonus it rolls off the tongue nicely.

Re: 🥺: the best sudo replacement

#336

Post by SLWW »

hot_gril wrote: post #103
adenozine wrote: post #73

Earlier quoted context omitted.

Rust? Well, speaking of egotistical open source people that refuse to change...

Heh. I get what you're saying, but I feel that vibe much more from Golang than from Rust. Rust seems down to earth.

I do think it's funny how this is the only comment in the thread that isn't greyed out.

I wonder if there would be a way to lose the 'value' of a downvote if the account in question predominantly downvotes a specific opinion too much (a form of abuse i think). The assumption being that, "ok, you downvoted three posts, that were all very incendiary; though the other 40+ you've downvoted were all that way, statically the chance that those posts are all offensive is unlikely."

Would be interesting to see; I don't hate Rust, but I don't appreciate the zealous nature of most of their advocates, and for me personally, there's nothing fun about writing in Rust. It's also a bit too bloated for my tastes, i would never want to run it in lowlevel personally. Yet most of the time I stay away from threads talking about Rust, because i just get sent to the bottom fairly quickly, on most sites that encourage discussion.

Re: 🥺: the best sudo replacement

#337

Post by yjftsjthsd-h »

xena wrote: post #81
tristor wrote: post #69

Earlier quoted context omitted.

Honestly, I don't think you should take anything the author of this wrote seriously, the most charitable interpretation is that most of their work is a form of satire.

Speaking as the author of the work, most of _this post_ is satire meant to make you think about the existing security boundaries involved in privilege escalation. It is a false problem. The part about being annoyed that sudo is still written in C is coming from a sense of exasperation that there's still more predictable memory safety bugs involved with sudo because it's still written in C. The comment about python-cr…

The Gentoo folks have packaged https://packages.gentoo.org/packages/app-admin/doas ( so they appear to be fine with sudo replacements) and https://packages.gentoo.org/packages/sys-apps/ripgrep (so rust isn't a problem), so if you'd like to do the work and write a sudo replacement in rust, I'm sure they'd be happy to package it as well.

Re: 🥺: the best sudo replacement

#338

Post by alisonatwork »

doublepg23 wrote: post #298
azalemeth wrote: post #168

Earlier quoted context omitted.

The are quite a lot of "gotchas" with passwords being Unicode though. One of my favourite tricks is to include a null byte in passwords and see what happens. Sudo treats it as the end of the string. Passwd gives "token manipulation error" and nopes out. Many websites seem to fail in interesting ways...

I've run into a service where having a password longer than 15 characters _truncates_ it but the password change dialog does not so it's stuck in limbo.

One site I went to lowercased my password before storing it unencrypted in the DB, which I only discovered after failing to log in and asking for a password reset mail, so it helpfully emailed me my clear text lowercased password.

Re: 🥺: the best sudo replacement

#340

Post by viewtransform »

Waterluvian wrote: post #163

“ has no pronounceable name in English or any other speakable human language.” I’m in love with this because it’s so silly. I’ve always wondered what would happen if you gave a company an unpronounceable name and it took off. My guess is that the community would name it and that would be that. But I’m fascinated to witness that process happen. I really hope Sado takes off. ;)

They could name it Ƭ̵̬̊ and people would call it Prince.
Post reply on HN