Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

🥺: the best sudo replacement

xeiaso.net

Post reply on HN
Print view View original

371–380 of 559 posts

Re: 🥺: the best sudo replacement

#371

Post by toast0 »

dreamcompiler wrote: post #309
xena wrote: post #123

Earlier quoted context omitted.

The main problem with SSH keys is that they are good at small scales, but at larger scales the abstractions start to be really leaky. Distributing SSH keys across hundreds of machines is a nontrivial task. Not to mention the lack of audit logging in opensshd and the lack of session recording (these requirements suck but acronym compliance means you need them anyways). It's also kind of the wrong tool for the job anyw…

> Distributing SSH keys across hundreds of machines is a nontrivial task. In what sense? If you're distributing public keys to hundreds of servers, go nuts. Put them in git repos and clone them. If you're distributing private keys to hundreds of clients, why do you ever need to do this? Assuming you do (and I'm just missing something), then I see your point but if you ensure they're encrypted with the user's pass phr…

Yeah, the trickiest part is getting new users to check in their keys to git if git is authenticated with ssh keys. And if you need sudo to install keys, you've gotta use autopw[1] or something similar, and at least autopw is single threaded, so if you've got more like thousands of servers, it's a bit messy. Smarter people than I setup full automation for this kind of stuff, but then you have to trust the automation.

[1] https://github.com/jschauma/sshscan/blob/master/src/autopw

Re: 🥺: the best sudo replacement

#372

Post by alisonatwork »

cdaringe wrote: post #350
alisonatwork wrote: post #338

Earlier quoted context omitted.

One site I went to lowercased my password before storing it unencrypted in the DB, which I only discovered after failing to log in and asking for a password reset mail, so it helpfully emailed me my clear text lowercased password.

Incredible. Please tell us who did this, not to shame them, bit to help us!

It was an online store I bought something from quite a few years back. I would hope most stores are using more modern back ends nowadays that doesn't allow this to happen.

Re: 🥺: the best sudo replacement

#373

Post by Dylan16807 »

doodlesdev wrote: post #317
Dylan16807 wrote: post #289

Earlier quoted context omitted.

Consider it like dressing up, with nice clothes. Sexual attraction is an important aspect of dressing up to some people, but that's only part of the time, and just generically being dressed up is not a sex thing.

[flagged]

Dressing up with nice clothes is not bikinis. Some fluff and weird ears is not in any way like a bikini.

Re: 🥺: the best sudo replacement

#375

Post by recuter »

eyelidlessness wrote: post #366
recuter wrote: post #239

Earlier quoted context omitted.

The damage is done, they are alas, already triggered.

I’m going to give you the benefit of the doubt that you mean this in good faith, even though I don’t think you do. What is the damage, and how doesn’t the site owner explaining how to consume their site without furries address it?

The damage might be permanent and irreversible psychological and emotional scaring. The trigger warning needs to come before the objectionable content is seen of course.

https://uwaterloo.ca/centre-for-teaching-excellence/trigger

A trigger warning is a statement made prior to sharing potentially disturbing content. That content might include graphic references to topics such as sexual abuse, self-harm, furies, violence, eating disorders, and so on, and can take the form of an image, video clip, audio clip, or piece of text.

In an academic context, the instructor delivers these messages in order to allow students to prepare emotionally for the content or to decide to forgo interacting with the content.

Re: 🥺: the best sudo replacement

#377

Post by w-ll »

arp242 wrote: post #314
imglorp wrote: post #265

Earlier quoted context omitted.

Maybe not for yourself, but sudo can be a benefit when playing with others: fine grained roles and permissions, audit trail, etc.

Yes, I was joking. Or "woosh", as I believe the kids say these days.

we actually have ascii character pattern for that when posting.

/s

Re: 🥺: the best sudo replacement

#380

Post by arp242 »

w-ll wrote: post #377
arp242 wrote: post #314

Earlier quoted context omitted.

Yes, I was joking. Or "woosh", as I believe the kids say these days.

we actually have ascii character pattern for that when posting. /s

Ah yes, because every joke becomes better when you announce that it's a joke.
Post reply on HN