Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

🥺: the best sudo replacement

xeiaso.net

Post reply on HN
Print view View original

551–559 of 559 posts

Re: 🥺: the best sudo replacement

#551

Post by SLWW »

hot_gril wrote: post #354
SLWW wrote: post #336

Earlier quoted context omitted.

I do think it's funny how this is the only comment in the thread that isn't greyed out. I wonder if there would be a way to lose the 'value' of a downvote if the account in question predominantly downvotes a specific opinion too much (a form of abuse i think). The assumption being that, "ok, you downvoted three posts, that were all very incendiary; though the other 40+ you've downvoted were all that way, statically t…

Guess I haven't been on enough HN Rust threads yet. My assessment of Rust's vibe comes just from reading the docs and online help when I was using it in a project years ago. It feels like C where they're just trying to get stuff done. I don't have strong opinions on Rust or Golang, and I don't use either one regularly. In that project, I ended up doing most of my work in some FFI'd C code. I do judge language communi…

That is a healthy option imo, it's not a terrible lang or anything like that; it just gets way more praise and has seen too much growth that it has yet to earn.

My preference is C for personal projects; I like the freedom.

C# because I work with .NET a lot; some might say too much, i get weary of it sometimes. Python is kind of goofy, but it's useful and easy enough to use that I don't mind it's presence in my work.

I will never work with Java professionally ever again if I can help it; I don't like the JVM; working with Android was the final killing blow, i hate mobile dev. simply because they often have me work with ART and i just can't do it with any real enjoyment. Golang is odd, and I have yet to find any real use for it.

The Rust community is pretty unsettling in their dedication, and they seem to actively lie if you question it's usefulness in a specific situation, so i'm weary of their advice. NodeJS is useful, but truly awful to maintain after the fact. It's also quite nonsensical; I would still spend the extra time just using php or python (with flask), Node is also far too bloated and the bottlenecks seem to make my life only more difficult anytime I try to make something even remotely performant without just throwing load-balancers onto every node website I've ever worked on... not worth it.

NIM is by far my favorite; I don't know why, but I love it, it's the language i would build if I had the time. And... C++ has way too many options to do one thing that it confuses most solutions when I've ran into problems, it's just too much.

Something I've learned over the years is that the choice of tool, before you even start on a project, must be taken seriously; if you mess that up, you will be paying for it for potentially years to come.

Re: 🥺: the best sudo replacement

#552

Post by SLWW »

bee_rider wrote: post #355
SLWW wrote: post #336

Earlier quoted context omitted.

I do think it's funny how this is the only comment in the thread that isn't greyed out. I wonder if there would be a way to lose the 'value' of a downvote if the account in question predominantly downvotes a specific opinion too much (a form of abuse i think). The assumption being that, "ok, you downvoted three posts, that were all very incendiary; though the other 40+ you've downvoted were all that way, statically t…

IMO there’s a widespread belief that these upvote/downvote systems are fundamentally stupid, which is actually true, but I think it also holds back the implementations a bit. I’d love to see for example a site that treats them as endorcements or something. The logic could be something like: keep track of the graph of who upvotes what. When you upvote somebody, you reinforce the link between the two of you. Then, when…

I would love to see a POC of this in action.

I think that this would not fix the issue entirely, but it deserves some thought. It's a unique way of looking at the problems.

Of course this becomes less effective when the community itself gets large, so it won't scale as easily.

Re: 🥺: the best sudo replacement

#553

Post by epicalex »

doublepg23 wrote: post #298
azalemeth wrote: post #168

Earlier quoted context omitted.

The are quite a lot of "gotchas" with passwords being Unicode though. One of my favourite tricks is to include a null byte in passwords and see what happens. Sudo treats it as the end of the string. Passwd gives "token manipulation error" and nopes out. Many websites seem to fail in interesting ways...

I've run into a service where having a password longer than 15 characters _truncates_ it but the password change dialog does not so it's stuck in limbo.

I believe the British Airways site still does something similar to this, or it did until very recently if it's been fixed. Add a password that is too long, it gets truncated and the truncated version saved with no warning or error.

It took me several password reset attempts to realise what was going on, as my literally just set and password manager-saved password didn't work.

I think in BA's case the password input also had a character limit on it, which is ultimately how I realised what was happening, even though there was no info anywhere that such a limit existed.

Re: 🥺: the best sudo replacement

#554

Post by CameronNemo »

StreamBright wrote: post #476
AtlasBarfed wrote: post #61

Earlier quoted context omitted.

Except the enterprise security industry is waging war on ssh keys and ssh/sshd.

It is not as much the enterprise security industry as it is better security for all. Problem with the current implementation with ssh keys is that there are non-trivial problems with it. For example how do you revoke a key? It is not possible in a central AAA service to revoke access for a user like it is possible for other kind of auth systems. Ssh and ssh keys were designed in an era where security was not really t…

There is so many things wrong with your comment it is not even worth explaining.

Re: 🥺: the best sudo replacement

#555

Post by CameronNemo »

xena wrote: post #123
arp242 wrote: post #116

Earlier quoted context omitted.

What's wrong with ssh keys? Or ssh/sshd for that matter?

The main problem with SSH keys is that they are good at small scales, but at larger scales the abstractions start to be really leaky. Distributing SSH keys across hundreds of machines is a nontrivial task. Not to mention the lack of audit logging in opensshd and the lack of session recording (these requirements suck but acronym compliance means you need them anyways). It's also kind of the wrong tool for the job anyw…

There is 0 reason to distribute SSH keys across machines. You can tell SSH to use LDAP to check a user's keys, trivially.

Re: 🥺: the best sudo replacement

#556

Post by CameronNemo »

mid-kid wrote: post #88
CameronNemo wrote: post #35

For some more serious alternatives, I have heard of many people finding doas to be a drop in replacement. Furthermore, I've heard some people suggest neither doas nor sudo, but instead using an SSH server to gain root access to your local machine. It could listen on localhost and use key-based auth to allow root logins...

Using key-based auth without encrypting the key with a password sounds like a bad idea, as then any program running on the host can trivially gain root privileges.

Nobody said you can't encrypt the key?

Also some people use password-less sudo, so...

Re: 🥺: the best sudo replacement

#557

Post by kleer001 »

throwanem wrote: post #282
kleer001 wrote: post #231

Earlier quoted context omitted.

It seems informal and a waste of my time. I'm reminded of the biographical wordarrheah at the head of recipes these days. I. Don't. Care. I'm too old and I don't have time for this.

Yeah, can't let it cut into your "complaining about websites" time.

You must be a blast at parties held by the professionally offended.

Wrong scale of time. Comments take 10 minutes. Additionally, the complaining is less than 5% of my commenting time. I use it mainly to bolster opinions not already commended.

Re: 🥺: the best sudo replacement

#558

Post by TheHappyOddish »

rtpg wrote: post #283
Waterluvian wrote: post #163

“ has no pronounceable name in English or any other speakable human language.” I’m in love with this because it’s so silly. I’ve always wondered what would happen if you gave a company an unpronounceable name and it took off. My guess is that the community would name it and that would be that. But I’m fascinated to witness that process happen. I really hope Sado takes off. ;)

People in Japan call this emoji “pien” (pronounced “P N” if you’re American) which means like… slight dejection Was one of the 2020 words of the year by some random group of people! https://www.nippon.com/en/japan-topics/c03823/amp/#

How is it pronounced if you're not American but still speak english?

Re: 🥺: the best sudo replacement

#559

Post by throwawayacc3 »

doodlesdev wrote: post #167
NotYourLawyer wrote: post #114

[flagged]

Normally this is just tangentially related and not for Hacker News but I feel this time it needs a bit of attention. My brain melted in the first minutes trying to read this article. I honestly just couldn't. It feels like I'm reading a mentally ill extremelly schizophrenic write-up on the recent sudo vulnerabilities, makes me lose sanity. Has anyone actually managed to read this? How is this on the front page? (Not…

>It feels like I'm reading a mentally ill extremelly schizophrenic write-up on the recent sudo vulnerabilities

It doesn't feel like it, you are. You are reading a mentally ill extremely schizophrenic write-up on the recent sudo vulnerabilities

Post reply on HN