Live data from Hacker News

Remove “This incident will be reported.” from user warnings

github.com

61–70 of 302 posts

Re: Remove “This incident will be reported.” from user warnings

#62

Can someone share even one story where sudo reporting these "incidents" was helpful? This feature seems to come from a world where elite hackers simply repeat the same sudo command over and over hoping it will eventually work.

> Can someone share even one story where sudo reporting these "incidents" was helpful?

No, not a single one.

Re: Remove “This incident will be reported.” from user warnings

#63

So according to the comments it isn't actually gone, just the wording updated and now dependent on if you have actually set up the mailer to report it somewhere https://github.com/sudo-project/sudo/commit/9757d29a24ac1872...

That seems pretty stupid.

While they're at it, why not update the SSH warning banner with a list of what we do and don't log on this system. As a courtesy to their adversary.

This sudo message has been the same since the dawn of time. There is literally no reason to correct it. This is the one place you don't want to be pedantic, leaking security configuration via stderr.

Re: Remove “This incident will be reported.” from user warnings

#65

So according to the comments it isn't actually gone, just the wording updated and now dependent on if you have actually set up the mailer to report it somewhere https://github.com/sudo-project/sudo/commit/9757d29a24ac1872...

That seems pretty stupid. While they're at it, why not update the SSH warning banner with a list of what we do and don't log on this system. As a courtesy to their adversary. This sudo message has been the same since the dawn of time. There is literally no reason to correct it. This is the one place you don't want to be pedantic, leaking security configuration via stderr.

[deleted]

Re: Remove “This incident will be reported.” from user warnings

#68

So according to the comments it isn't actually gone, just the wording updated and now dependent on if you have actually set up the mailer to report it somewhere https://github.com/sudo-project/sudo/commit/9757d29a24ac1872...

That seems pretty stupid. While they're at it, why not update the SSH warning banner with a list of what we do and don't log on this system. As a courtesy to their adversary. This sudo message has been the same since the dawn of time. There is literally no reason to correct it. This is the one place you don't want to be pedantic, leaking security configuration via stderr.

something like 99% of computers with sudo installed are single-user machines where the only effect of the warning is to scare people

and it's only been the same since people started to switch to sudo in the late 90s; su never printed such a warning

Re: Remove “This incident will be reported.” from user warnings

#69

Stressful message to see back when I was a clueless child. I'm glad its getting removed.

I had a similar reaction to Windows 95's "An illegal operation has occurred." I remember wondering whether the police were on their way.

A friend of mine ran a multi-line BBS out of his home when he lived with his parents.

One day he came home and his parents sat him down to discuss the "illegal activities" he was up to with the computers. He was sweating bullets about the secret warez section of the BBS until eventually he figured out that it was due to an illegal operation crash message!

(In that case it was probably desqview rather than windows)

Re: Remove “This incident will be reported.” from user warnings

#70
post #23

Earlier quoted context omitted.

It's only removed if sudo doesn't send mail. It still warns if it's relevant.

Is there more to the change than the linked commit? Because if not, looking at the code change I don't see how you could possibly be correct. There is no additional logic/branching that could be checking whether sudo sends mail or not, just a string change.

It was added back in a later commit but only prints if the mail is configured.
Post reply on HN