Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

🥺: the best sudo replacement

xeiaso.net

Post reply on HN
Print view View original

441–450 of 559 posts

Re: 🥺: the best sudo replacement

#441

Post by nxpnsv »

still_grokking wrote: post #430
remram wrote: post #272

Earlier quoted context omitted.

I'm using Ubuntu/KDE/Plasma. "Discover" is the GUI app that prompts you to install system updates, and will ask for your password when you do (to run apt/dpkg as root). Discord doesn't directly ask for my password, it downloads a .deb from somewhere and opens it, and I get prompted for my password then. Not much different IMHO.

I'm using Debian(Testing)/KDE/Plasma. (What was the point here?) I don't have any "Discover" installed as it's not needed for anything. There's aptitude… Regarding Discord: Discord is a virus. I try to avoid it. (And since you can't register without getting naked and showing the virus your telephone number it's not difficult to avoid ;-)).

I don't think I ever gave discord a phone number...

Re: 🥺: the best sudo replacement

#442

Post by sshine »

still_grokking wrote: post #428
chungy wrote: post #305

Earlier quoted context omitted.

Yes, now see if any random service actually uses said functions...

If Unicode weren't broken it wouldn't need any "normalization functions". And no, I don't have anything better to propose at the moment. Unicode is a mess, but currently without realistic alternatives. Still I would like to live long enough to see that we finally manage to create some proper text format without all kinds of crazy gotchas and deficiencies.

Care to elaborate?

Are you suggesting that a better version of Unicode does not allow combining characters? [1]

Some languages have an explosive amount of characters if you regard each possible modifier in combination with each base character, some of which aren't practically used. By allowing the composition of modifiers and base letters, all the historically used ones are available, and all the odd ones are technically expressible.

I'm not sure how you encode all the world's languages, live and dead ones, without a few gotchas and deficiencies.

What would an always-normalized Unicode look like, if not either having really, really many characters, or having a non-trivial syntax?

[1]: https://www.unicode.org/versions/Unicode15.0.0/ch03.pdf#G306...

Re: 🥺: the best sudo replacement

#443

Post by schroeding »

msla wrote: post #424
xena wrote: post #133

Earlier quoted context omitted.

Thanks! That's exactly the point of it! I'm going to be working on the CSS this weekend on stream (the images being so big for longer conversations take up too much screen real estate), but in general the idea is to have a combination of the Socratic method of dialogue based teaching combined with a few consistently written characters; not to mention it helps move out parentheticals to break up giant walls of text. I…

I just have to say: May you one day end up on a system nobody uses, and watch as your environment dies so other people can have "nice things".

Why shouldn't people try different, novel approaches on their personal websites, though?

Where else should one try out "weird" (non-mainstream) concepts and see what sticks?

I don't understand your harsh dismissal of the author based on the design of a personal website, to be honest.

Re: 🥺: the best sudo replacement

#444

Post by avgcorrection »

chungy wrote: post #219
avgcorrection wrote: post #144

Earlier quoted context omitted.

Looking up.

Depending on font. Inside my web browser, it appears to be looking up. On my web browser's title bar (so rendered by my window manager...), it appears to be looking down, or maybe straight forward. Fonts make a big difference on interpretation too. I remember a few years back, there was a problem where Apple implemented "GRINNING FACE" in such a way that Apple users interpreted it as a sarcasm indicator, but most oth…

Huh. That’s weird. A looking down variant sounds misleading.

Re: 🥺: the best sudo replacement

#445

Post by varajelle »

yjftsjthsd-h wrote: post #409
cdogl wrote: post #359

I didn’t learn anything from this post about why to use this sudo replacement except that it’s written in Rust and that it handles errors. Am I missing something?

Sarcasm/humor; the program in question does no authentication, so it's not an alternative in any meaningful sense.

I was thinking the same. But then I thought about it more and wondered why you need to enter your own password if you're already logged on. If an attacker is already in the system, it can install key logger and whatnot without the root password. And the xn--ts9h program can have the Unix permission so that only the user can run it.

Re: 🥺: the best sudo replacement

#447

Post by bogeholm »

bobbylarrybobby wrote: post #418
CGamesPlay wrote: post #406

What was the point of this post? No, this program isn't a replacement for sudo; it's closer to a reimplementation of su. The post links to 3 CVEs and talks about Rust, but only one of the CVEs was a memory safety bug, the others are a logic error and a race condition, neither of which are protected by Rust (sadly).

I thought safe rust did prevent race conditions by preventing simultaneous write access to data except behind a Mutex or similar guard.

Check out eg. “Race condition vs. Data Race: the differences explained” [0]

[0]: https://www.avanderlee.com/swift/race-condition-vs-data-race...

Re: 🥺: the best sudo replacement

#448

Post by progval »

eptcyka wrote: post #438
CGamesPlay wrote: post #419

Earlier quoted context omitted.

That's a memory safety issue that caused by a race condition. Rust prevents memory safety issues, but not race conditions. The race condition in one of the CVEs is in the filesystem, not in sudo.

Rust does prevent memory race conditions, but of course, only within the address space of the process and only for memory read and written to exclusively by rust code.

For example, there is this (pure safe Rust) code: https://github.com/ben0x539/totally-safe-transmute/blob/main... which accesses external resources (/proc/self/mem) in order to violate the safety guarantees.

Re: 🥺: the best sudo replacement

#449

Post by account-5 »

varajelle wrote: post #445
yjftsjthsd-h wrote: post #409

Earlier quoted context omitted.

Sarcasm/humor; the program in question does no authentication, so it's not an alternative in any meaningful sense.

I was thinking the same. But then I thought about it more and wondered why you need to enter your own password if you're already logged on. If an attacker is already in the system, it can install key logger and whatnot without the root password. And the xn--ts9h program can have the Unix permission so that only the user can run it.

Insider threat, attacker not in the system, you leave your terminal unlocked and are away. Someone walks passed and tries to install something from you terminal?

Re: 🥺: the best sudo replacement

#450

Post by avgcorrection »

aendruk wrote: post #313
avgcorrection wrote: post #50

Earlier quoted context omitted.

The meaning can also be inferred from… the face.

Not as obvious as you think. https://github.com/twitter/twemoji/blob/v14.0.1/assets/72x72... To me at 2–3 mm it looked more like sleep deprived baggy eyelids (or maybe candy corn eyes, but what does that mean?). I read the whole post thinking the program was named after exhaustion, not pleading. I just polled the room and most guesses were that it’s sadness/sorrow.

Sleep deprived is also a good guess in my opinion!
Post reply on HN