[deleted]
🥺: the best sudo replacement
501–510 of 559 posts
Re: 🥺: the best sudo replacement
#502Earlier quoted context omitted.
In the enterprise key management can become a bitch really quickly. Good luck updating 10.000 servers every time an admin leaves. For them ssh certificates are much better because you can simply revoke them, and new certs don't have to be added to each server. At home I still use keys though, but as an enterprise admin I see the issues. Even at home it's kinda annoying having to add a new yubikey to 20 servers.
> In the enterprise key management can become a bitch really quickly. Good luck updating 10.000 servers every time an admin leaves. Can't "jump host" solve this? (Not an admin, so please excuse if the question is stupid).
No
Re: 🥺: the best sudo replacement
#503What was the point of this post? No, this program isn't a replacement for sudo; it's closer to a reimplementation of su. The post links to 3 CVEs and talks about Rust, but only one of the CVEs was a memory safety bug, the others are a logic error and a race condition, neither of which are protected by Rust (sadly).
Yeah, no idea why people are upvoting this. Reads like a listening to the internal jokes of a tight-knit group that you don’t know.
Re: 🥺: the best sudo replacement
#504Earlier quoted context omitted.
I don't think I ever gave discord a phone number...
That just means you're fully transparent to them. (Likely they have linked other accounts / IIP data behind the scenes; using it form a phone will have that effect obviously). It's almost impossible to register an anonymous account there. Even if you find a throw-away SMS number that works to register (which is hard enough) a few hours later they will block that account again and require a fresh number to unlock. I'v…
More likely it just means they have an old account from when they weren’t as hung ho about it all and now they don’t delete it on a whim because it’s longstanding without issue. Same thing with mine, beyond it’s desperate for that phone number for things lately.
Re: 🥺: the best sudo replacement
#505> They wrote the program in C They wrote it in 1980 for unix; what exactly would you like them to have used? > (as far as I can tell) have no intention of rewriting it in Rust Since it will be less than a paragraph before you start ranting about how "obscure targets that nobody uses won't be able to leech off of the rest of the ecosystem by holding back any chance to let us have a modicum of nice things", I trust you…
>They wrote it in 1980 for unix; what exactly would you like them to have used? Pascal
Huh. I didn't think there was Pascal for Unix back then, but apparently there was:
https://web.archive.org/web/20200614183924/http://www.grokla...
So yes, actually, that might have been possible, and if so it probably would have been better than C.
Re: 🥺: the best sudo replacement
#506The first time I saw perfectly valid Unicode take down an RSS reader (in ~2003), it was an ü that did it. I have taken to calling that the kaboomlaut in unit tests.
dümlaut
Re: 🥺: the best sudo replacement
#507Earlier quoted context omitted.
Umlauts are in Latin1, so it’s pretty shoddy software that couldn’t deal with that.
As late as 2020 I encountered a European shop that couldn't handle my Swedish address that had an å in it. That is, it accepted the address on the website, but then it got screwed in the delivery. I'm still in awe.
Sounds 'normal' if the website was built in a recent stack in recent years.
The shipping backend might run on a mainframe, almost if not fully unchanged from 40-50 years ago and blissfully unaware of anything but the mainframe quivalent of your standard ASCII.
You can see large stores run all their inventory and such on mainframes. If you ever look over someone's shoulder. My insurance also does but it looks like they don't because it has a nice standard Windows look on the 'inside' of the window. Looked at the title bar and yep, it's just a 3270 terminal emulator that renders fields as nice standard windows input fields that follow whatever theme your computer is set to instead of your telltale black background "DOS" look.
Re: 🥺: the best sudo replacement
#508Earlier quoted context omitted.
The best part is that it's a joke that has enough merit to it that it's worth being taken seriously. That makes for good satire. I love writing surrealism, it's a very hard balance to meet.
> The best part is that it's a joke that has enough merit to it that it's worth being taken seriously. That makes for good satire. I love writing surrealism, it's a very hard balance to meet. What makes you think you met it?
This comment section not understanding where I was being satirical.
Re: 🥺: the best sudo replacement
#509I feel obliged to mention doas[1], which is a sudo alternative from openBSD. It is written in c, but tries to be smaller and easier to configure. I am not qualified to vouch for or against it, but it is interesting. 1: https://man.openbsd.org/doas
I have moved over to doas a while back and it is really amazing. Why? Because it JUST WORKS. I do not need to learn a configuration language to understand what is going on. It does very little and that is exactly what 80% of the users need. We should use more software like that. Simplicity is the best design pattern.
When you find software that has a clean abstraction it really is a beautiful thing. sndiod (also from the BSDs) is also amazingly simple and reliable.
Re: 🥺: the best sudo replacement
#510Earlier quoted context omitted.
Speaking as the author of the work, most of _this post_ is satire meant to make you think about the existing security boundaries involved in privilege escalation. It is a false problem. The part about being annoyed that sudo is still written in C is coming from a sense of exasperation that there's still more predictable memory safety bugs involved with sudo because it's still written in C. The comment about python-cr…
The satire came through loud and strong. Perhaps consider that feedback from hn is somewhat biased on the spectrum? I thought the style was a refreshing change.
I think in my next post about this I'm going to have a giant banner for HN visitors that will block you from reading the article that says "THIS ARTICLE IS SATIRE" just to see how that changes what people say in the comments. I doubt it will have the impact I want though.