Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

🥺: the best sudo replacement

xeiaso.net

Post reply on HN
Print view View original

391–400 of 559 posts

Re: 🥺: the best sudo replacement

#391

Post by mateo- »

Waterluvian wrote: post #163

“ has no pronounceable name in English or any other speakable human language.” I’m in love with this because it’s so silly. I’ve always wondered what would happen if you gave a company an unpronounceable name and it took off. My guess is that the community would name it and that would be that. But I’m fascinated to witness that process happen. I really hope Sado takes off. ;)

lots of speculation on how to pronounce this Four Tet side project:

⣎⡇ꉺლ༽இ•̛)ྀ◞_༎ຶ_༽ৣৢ؞ৢ؞ؖ_ꉺლ https://www.discogs.com/artist/6400214-%EA%89%BA%E1%83%9A%E0...

Re: 🥺: the best sudo replacement

#393

Post by makeitdouble »

Waterluvian wrote: post #163

“ has no pronounceable name in English or any other speakable human language.” I’m in love with this because it’s so silly. I’ve always wondered what would happen if you gave a company an unpronounceable name and it took off. My guess is that the community would name it and that would be that. But I’m fascinated to witness that process happen. I really hope Sado takes off. ;)

> what would happen if you gave a company an unpronounceable name and it took off.

As long as it's an actual company taking money/paying for services, you'll have to register it, so it will have a pronounceable name.

Reminds me of "Love symbol" formerly know as "Prince". The symbol is great, but you'll have to register as an artist to get the money, you'll be signing contracts, etc., so whatever clever symbol you find, at some point a standard writable name will be settled on.

Re: 🥺: the best sudo replacement

#394

Post by [deleted] »

bee_rider wrote: post #381
eyelidlessness wrote: post #366

Earlier quoted context omitted.

I’m going to give you the benefit of the doubt that you mean this in good faith, even though I don’t think you do. What is the damage, and how doesn’t the site owner explaining how to consume their site without furries address it?

I think it isn’t necessary to give them the benefit of the doubt, they’ve brought up the language of triggering despite the original post just being sort of annoyed. In fact the original post explicitly says they don’t care about “furry shit” as they put it.

[deleted]

Re: 🥺: the best sudo replacement

#395

Post by saurik »

imglorp wrote: post #265
arp242 wrote: post #124

I just always login as root. No sudo or other programs needed, no security vulnerabilities, no complexity. Clearly the most secure solution as it's widely known that using the setuid bit is a security problem.

Maybe not for yourself, but sudo can be a benefit when playing with others: fine grained roles and permissions, audit trail, etc.

You have probably already lost at that point, though: if you want true security, you have to go it alone.

Re: 🥺: the best sudo replacement

#397

Post by UncleEntity »

gnarbarian wrote: post #165
yjftsjthsd-h wrote: post #104

Earlier quoted context omitted.

> I did write an actual replacement. It's what TFA is about :) That is obviously not a replacement; either we take the serious approach of "sudo allows only authorized users to run things as root" and yours doesn't control access, or we take the nonserious approach of "sudo has so many bugs that it just gives people access" in which case we hardly need to bother rewriting it.

to me the solution seems fairly obvious, and as is tradition already exists in unix as groups. sudo is for people who need root access. if you need anything less then create a custom group and assign the relevant specific rights there.

I just like sudo as a sanity checker — if I need it for some random command I stop and figure out why it needs root privileges.

The amount of times I’ve seen:

  wget random_script.sh && chmod +x random_script.sh
  sudo ./random_script.sh

Re: 🥺: the best sudo replacement

#398

Post by sixstringtheory »

devnullbrain wrote: post #356
viewtransform wrote: post #340

Earlier quoted context omitted.

They could name it Ƭ̵̬̊ and people would call it Prince.

Some others: Δ ・・・・・・・・・ !!! †‡†

I was gonna just about to comment about chick chick chick

Re: 🥺: the best sudo replacement

#400

Post by lrvick »

I feel it relevant to point out that any application running as a user that can run sudo, can just steal your sudo password.

https://gist.github.com/lrvick/b0f4b744ab277582b1f9c50e0eb87...

Having a password or a key or any other nonsense to run sudo is security theater.

If you do not want all applications to have real root access, use Qubes to isolate applications into VMs, or at the very least have your daily driver user not have root access and have a separate admin user.

Post reply on HN