Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

🥺: the best sudo replacement

xeiaso.net

Post reply on HN
Print view View original

451–460 of 559 posts

Re: 🥺: the best sudo replacement

#451

Post by account-5 »

wkat4242 wrote: post #387
AtlasBarfed wrote: post #61

Earlier quoted context omitted.

Except the enterprise security industry is waging war on ssh keys and ssh/sshd.

In the enterprise key management can become a bitch really quickly. Good luck updating 10.000 servers every time an admin leaves. For them ssh certificates are much better because you can simply revoke them, and new certs don't have to be added to each server. At home I still use keys though, but as an enterprise admin I see the issues. Even at home it's kinda annoying having to add a new yubikey to 20 servers.

You have 20 servers at home? What's you electrical bill like?

Re: 🥺: the best sudo replacement

#452

Post by Xylakant »

sshine wrote: post #437
xahrepap wrote: post #386

Earlier quoted context omitted.

The PayPal forgot password form had this bug just a couple years ago. I changed my password to a generated one. And it was too long. But it didn’t tell me. Just silently truncated. I used the password reset to change it. This time I used a pretty short password I could type (to rule out a weird copy-paste bug or something). Logged in, went to the change password option and THAT page informed me there was a character…

Password character limits are important. They reveal that the back-end service probably doesn't hash the passwords, which is a good time to GTFO.

I would consider setting a (high) limit for a password a good practice. No one wants an attacker to run a megabyte of password data through your slow password hash. It should be a limit that normal users never reach, but something like 100 chars seems entirely reasonable.

Re: 🥺: the best sudo replacement

#453

Post by scbrg »

makeitdouble wrote: post #393
Waterluvian wrote: post #163

“ has no pronounceable name in English or any other speakable human language.” I’m in love with this because it’s so silly. I’ve always wondered what would happen if you gave a company an unpronounceable name and it took off. My guess is that the community would name it and that would be that. But I’m fascinated to witness that process happen. I really hope Sado takes off. ;)

> what would happen if you gave a company an unpronounceable name and it took off. As long as it's an actual company taking money/paying for services, you'll have to register it, so it will have a pronounceable name. Reminds me of "Love symbol" formerly know as "Prince". The symbol is great, but you'll have to register as an artist to get the money, you'll be signing contracts, etc., so whatever clever symbol you fin…

I guess the point is that writable doesn't necessarily imply pronounceable.

Re: 🥺: the best sudo replacement

#454

Post by lelanthran »

cmeacham98 wrote: post #250
azalemeth wrote: post #168

Earlier quoted context omitted.

The are quite a lot of "gotchas" with passwords being Unicode though. One of my favourite tricks is to include a null byte in passwords and see what happens. Sudo treats it as the end of the string. Passwd gives "token manipulation error" and nopes out. Many websites seem to fail in interesting ways...

This has nothing to do with Unicode (assuming that by "Unicode" you mean "UTF-8"). The null byte has the exact same meaning in UTF-8 as ASCII: https://stackoverflow.com/questions/6907297/can-utf-8-contai...

> The null byte has the exact same meaning in UTF-8 as ASCII: https://stackoverflow.com/questions/6907297/can-utf-8-contai...

And what meaning is that? That link doesn't refer to an authority on the meaning of the nul byte.

Re: 🥺: the best sudo replacement

#455

Post by avgcorrection »

jowsie wrote: post #145
gumby wrote: post #87

Typing emoji is a pain, but the chat suggests that that might be an advantage: > Using this program requires you to be able to type an emoji. Most attack code is of such poor quality that they are unable to run commands named with emoji.

It's easy on Windows, just winkey+.

Is that the interface where I have to remember a Unicode code point just to get an em-dash?

Re: 🥺: the best sudo replacement

#456

Post by lelanthran »

xena wrote: post #155
brundolf wrote: post #146

Earlier quoted context omitted.

I'm really curious how much of a joke that was and wasn't

The best part is that it's a joke that has enough merit to it that it's worth being taken seriously. That makes for good satire. I love writing surrealism, it's a very hard balance to meet.

> The best part is that it's a joke that has enough merit to it that it's worth being taken seriously. That makes for good satire. I love writing surrealism, it's a very hard balance to meet.

What makes you think you met it?

Re: 🥺: the best sudo replacement

#458

Post by avgcorrection »

readthenotes1 wrote: post #119
sph wrote: post #105

Earlier quoted context omitted.

Am I the only one that can read faces in here? It is pretty obvious that it is a face doing the sad puppy eyes, like the one a young niece might do after I refuse to buy her some ice cream. I didn't even know it's meant to be underground, impenetrable slang.

you are alone

Nope. Face-reading is an underappreciated skill around these parts.

Re: 🥺: the best sudo replacement

#459

Post by dgb23 »

arp242 wrote: post #380
w-ll wrote: post #377

Earlier quoted context omitted.

we actually have ascii character pattern for that when posting. /s

Ah yes, because every joke becomes better when you announce that it's a joke.

I dislike it too. It’s typically unnecessary on hn because it’s well moderated and people often seem nice even when passionately disagreeing.

But on the wider internet everyone assumes you’re stupid. So the “/s” becomes a safety measure.

Also read once that it’s an accessibility thing. But I’m not sure if that’s true.

Re: 🥺: the best sudo replacement

#460

Post by avgcorrection »

yamtaddle wrote: post #221
sph wrote: post #105

Earlier quoted context omitted.

Am I the only one that can read faces in here? It is pretty obvious that it is a face doing the sad puppy eyes, like the one a young niece might do after I refuse to buy her some ice cream. I didn't even know it's meant to be underground, impenetrable slang.

It might be an emoji-font thing. Might be easier to tell what's up in some than others. I know I've seen emoji I sent from Apple devices on Android phones and been all "LOL WTF that's not what I sent at all" so that is sometimes a factor. Anyway, this is one reason why I prefer images and anigifs for expressing emotion in chats.

Slack transforms `:(` to `:disappointed:`… which is not helpful.
Post reply on HN