Oh please, don’t start using emojis on HN.
🥺: the best sudo replacement
341–350 of 559 posts
Re: 🥺: the best sudo replacement
#342Earlier quoted context omitted.
Does "bottom" mean what I think it means?
Yes
Re: 🥺: the best sudo replacement
#343Earlier quoted context omitted.
Heh. I get what you're saying, but I feel that vibe much more from Golang than from Rust. Rust seems down to earth.
I do think it's funny how this is the only comment in the thread that isn't greyed out. I wonder if there would be a way to lose the 'value' of a downvote if the account in question predominantly downvotes a specific opinion too much (a form of abuse i think). The assumption being that, "ok, you downvoted three posts, that were all very incendiary; though the other 40+ you've downvoted were all that way, statically t…
I mean, I heard it put this way and it has always stuck with me: every conversation here is implicitly inclusive of @dang. He’s wholly responsible for the vibes at large, and in the past several years it has become blindingly clear that he has no issues or qualms with Rusticles overtaking any thread they choose. I could write a scathing 10k word treatise on any topic with a single pithy remark about Rust in it somewhere and he’d allow the discussion to be dominated by the Rust tangent that would inevitably multiply in the comments here.
The chilling effect is as you describe, that I often feel discouraged from contributing my knowledge, experience or opinions because of the blatant manipulation of conversations by Rusticles and the apparently contentedness by dang for that to be the defining angle of discussion here.
HN should have tags. Every article gets tagged by users with high karma counts, by some sort of ranked consensus (maybe a rust tag, python tag, database tag, politics tag, etc) and users could just list tags they want muted in their settings.
Instead, I’ll be told about the HN guidelines and some minutia in this comment that is somehow worse than a thousand idiots hijacking literally every conversation about a particular topic.
As they say, not my monkey, not my circus…
Re: 🥺: the best sudo replacement
#344Earlier quoted context omitted.
"Unusual" isn't an insult; what's the actual problem?
It's unusual that there can't be negative feedback about a website. Different strokes. I want to read the content, but I can't. The website is too distracting. Is that a valid problem for you, oh great oracle?
> It's unusual that there can't be negative feedback about a website.
I didn't say that there couldn't be negative disagreement. Am I allowed to disagree with you and say that it's fine?
> I want to read the content, but I can't. The website is too distracting.
You can't read the text because there are little icons off on the side? I guess you can read it in elinks; it appears to load fine there. Someone upthread also posted a uBlock-style rule to filter them out.
> Is that a valid problem for you, oh great oracle?
No, it isn't; I'm not convinced that it's that bad to begin with, and if you really care the tools are available to it yourself.
Re: 🥺: the best sudo replacement
#345Re: 🥺: the best sudo replacement
#346how to type the emoji on terminal?
carefully
Re: 🥺: the best sudo replacement
#347Oh please, don’t start using emojis on HN.
[deleted]
Re: 🥺: the best sudo replacement
#348Earlier quoted context omitted.
The main problem with SSH keys is that they are good at small scales, but at larger scales the abstractions start to be really leaky. Distributing SSH keys across hundreds of machines is a nontrivial task. Not to mention the lack of audit logging in opensshd and the lack of session recording (these requirements suck but acronym compliance means you need them anyways). It's also kind of the wrong tool for the job anyw…
> Distributing SSH keys across hundreds of machines is a nontrivial task. SSH certificates are a thing.
Also user directories are thing and you can instruct OpenSSH to use any command you like to fetch a user’s authorized_keys.
Re: 🥺: the best sudo replacement
#349Earlier quoted context omitted.
I'm really curious how much of a joke that was and wasn't
I think the author intended it as a valid criticism, though it's hard to tell given the passé stylistic choice that calls back to early internet (I am nostalgic for those days sometimes). However I disagree with that as it's just one more, fairly silly, obstacle to overcome. If this "replacement" ever did, theoretically, been seen as suitable, all that would happen would be that attack code would suddenly see an incr…
> If this "replacement" ever did, theoretically, been seen as suitable, all that would happen would be that attack code would suddenly see an increase in quality.
This is where I believe security-through-obscurity is underrated. As long as you're small enough that targeted attacks aren't part of your threat model, merely being unique affords a great deal of safety. Your wierdo jerry-rigged authentication system may not be particularly robust, but it's more likely than any mainstream product to repel an automated attack.
Re: 🥺: the best sudo replacement
#350Earlier quoted context omitted.
I've run into a service where having a password longer than 15 characters _truncates_ it but the password change dialog does not so it's stuck in limbo.
One site I went to lowercased my password before storing it unencrypted in the DB, which I only discovered after failing to log in and asking for a password reset mail, so it helpfully emailed me my clear text lowercased password.
Incredible. Please tell us who did this, not to shame them, bit to help us!