Live data from Hacker News

Todd C. Miller – Sudo maintainer for over 30 years

millert.dev

211–220 of 337 posts

Re: Todd C. Miller – Sudo maintainer for over 30 years

#211
post #96

Earlier quoted context omitted.

Seriously, just put a VAT on digital services to fund a system that pays out grants to individuals to help maintain open source software. It should be obvious by now that corporations will rat fuck the commons for monetary gain and there is a serious need for democratic initiatives to put technology back into the hands of the people.

I would like to live in this utopia where free software is funded by the state. This seems impossible to get implemented in our world though.

But how would that work? There isn’t unlimited money so who decides what software to support with state money and which developers? I don’t have trust in a bureaucracy to decide which developers should get paid to work on sudo. Just look at a the sudo-rs debacle and that’s without money involved.

Re: Todd C. Miller – Sudo maintainer for over 30 years

#212

Earlier quoted context omitted.

"Done" software is a myth they tell to young developers so that they can sleep easy at night.

wireguard is relatively "done"

Of all the things to pick, software which needs to be secure and is actively attacked is the worst one.

Re: Todd C. Miller – Sudo maintainer for over 30 years

#213

Earlier quoted context omitted.

Out of curiosity, what changes would it have at this point?

I'm not intimately familiar with Wireguard, but there are some things that are almost universally applicable: - It should run on an maintained OS (which should run on available hardware), so whatever changes are necessary to keep pace with that - It may want to add optimizations regarding newer CPU architectures - It uses a compiler, so whatever changes necessary to stay on a maintained version of the compiler - It u…

It uses Curve25519 for key exchange and ChaCha20-Poly1305 for symmetric encryption. There aren't many hardware primitives that would speed it up, although AVX2 and similar would help process ChaCha20.

Re: Todd C. Miller – Sudo maintainer for over 30 years

#214
post #118

30+ years maintaining one of the most critical pieces of infrastructure on nearly every Linux and Unix system, and he's currently looking for a sponsor to fund continued development. Every company running sudo in production owes this man. Someone should fix that

Surprisingly Jia Tan has not offered to help yet.

Jia Tan and his 40 sockpuppets are undoubtedly trying.

Re: Todd C. Miller – Sudo maintainer for over 30 years

#215
post #179
post #164

Earlier quoted context omitted.

Then fork it and finish it. I’m sure it will be a huge success.

You should look up "doas". It might enlighten you.

If you have a point to make then make it. I don’t accept anonymous homework assignments.

Re: Todd C. Miller – Sudo maintainer for over 30 years

#216

30+ years maintaining one of the most critical pieces of infrastructure on nearly every Linux and Unix system, and he's currently looking for a sponsor to fund continued development. Every company running sudo in production owes this man. Someone should fix that

This is a good example of Diffusion of Responsibility. Everybody thinks somebody else should help, so nobody does.

Google made 10^7 as much money as I did last year. Yea, I don't think it's as simple as you make it seem.

Re: Todd C. Miller – Sudo maintainer for over 30 years

#217

Earlier quoted context omitted.

This is a good example of Diffusion of Responsibility. Everybody thinks somebody else should help, so nobody does.

I don't think they even see it as their responsibility, more, "If he wanted money, he should have charged for his software".

"Your 3 months sudo trial is expiring. Would you like to sign up for sudo-pro (best for hobbiest and small teams), sudo-business (up to 100 users) or sudo-enterprise (reach out for a quote)"

Re: Todd C. Miller – Sudo maintainer for over 30 years

#220

Earlier quoted context omitted.

I'm not intimately familiar with Wireguard, but there are some things that are almost universally applicable: - It should run on an maintained OS (which should run on available hardware), so whatever changes are necessary to keep pace with that - It may want to add optimizations regarding newer CPU architectures - It uses a compiler, so whatever changes necessary to stay on a maintained version of the compiler - It u…

It uses Curve25519 for key exchange and ChaCha20-Poly1305 for symmetric encryption. There aren't many hardware primitives that would speed it up, although AVX2 and similar would help process ChaCha20.

> It uses Curve25519 for key exchange and ChaCha20-Poly1305 for symmetric encryption.

For now.

> There aren't many hardware primitives that would speed it up,

For now.

> although AVX2 and similar would help process ChaCha20.

So, there's at least a bullet point for experimental branching.

Also, the WireGuard Tunnel Manager on macOS is far from done.

Post reply on HN