Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Omarchy: Any User Process Can Escalate to Root

0xcc.io

Post reply on HN
Print view View original

151–160 of 584 posts

Re: Omarchy: Any User Process Can Escalate to Root

#151

Post by weaksauce »

supriyo-biswas wrote: post #102
quadrifoliate wrote: post #42

Earlier quoted context omitted.

[flagged]

> As a developer who mostly wants a Mac-like Linux distro without the associated noise I'm required to use Ubuntu at work. Coming from Mac, apart from the menu bar at the top, on Gnome, I've been able to customize the keyboard shortcuts, remap the keyboard so that Ctrl works like Cmd, and use extensions like Dash to Dock[1] and themes like Whitesur[2] to replicate something that almost works like a Mac. The keyboard…

if you reset the keyboard shortcuts to their defaults and install toshy you can get the ctrl-a/e stuff and copy and paste in the command line with cmd-c/v and a lot of the other mac like keyboard shortcuts. it's really plug and play and works well... can't recommend it enough. (though there are some edge cases that may require some tweaks but overall it's great)

https://github.com/RedBearAK/toshy

Re: Omarchy: Any User Process Can Escalate to Root

#153

Post by itishappy »

normie3000 wrote: post #135
AshamedCaptain wrote: post #107

Earlier quoted context omitted.

While I don't want to discuss the quality of any distro vs Windows, there is a big reason most of us use free software: because it is free . Whether for you it is because of free as in freedom or free as in beer specifically, quality may not have much to do with it.

Isn't Windows also basically free? Every laptop I buy has a Windows licence stuck to the bottom of it.

No, you've been charged for every one of those licenses.

Re: Omarchy: Any User Process Can Escalate to Root

#156

Post by Retr0id »

mike_hearn wrote: post #89
Retr0id wrote: post #38

Earlier quoted context omitted.

> Unfortunately implementing an Apple style architecture on Linux would be very difficult. On desktop Linux as we know it, yes, but Android manages it alright, mostly via SELinux+seccomp.

Android is basically a different OS that happens to reuse parts of the Linux kernel.

Yes, it reuses all the security features.

Re: Omarchy: Any User Process Can Escalate to Root

#157

Post by teekert »

concinds wrote: post #48

A few days ago someone found they were flowing USB descriptors straight into the shell. https://github.com/omacom/omarchy/commit/9285b19d6a72eba3df8... Don't use vibecoded distros. It doesn't matter whether they fix this or that, or whether you care about a particular vuln. This is not sensible. It's why you switched away from Windows in the first place, remember?

But, this “vulnerability” is the thing everybody knows about docker since forever. I always make my user part of the docker group, so my NixOS also has this, and any Ubuntu I’ve used over the past year. What is different here?

Start a docker container with the docker socket mounted in the container and now you can have yourself mount / as rw. Everybody knows this. How is everybody so shocked here. Many instructions online tell you to make yourself part of the docker group for convenience (like the digital ocean one).

Re: Omarchy: Any User Process Can Escalate to Root

#158

Post by ok123456 »

lelota wrote: post #152

Other day i was hearing DHH talk on Lex's podcast on Omarchy and how he does not look at the code anymore. The guy built solid reputation with his prev contributions but now falling to AI slop.

He must really be all in on AI to be interviewed by one.

Re: Omarchy: Any User Process Can Escalate to Root

#159

Post by vincnetas »

urams wrote: post #148
silisili wrote: post #81

Earlier quoted context omitted.

Other than hype, what's the appeal here? I saw a couple video demos recently, and was horrified that it seemed one had to memorize a dozen key binding shortcuts to really use it. Is that rather common now? I'm just a Gnome pleb who prefers discoverability via UI.

> I saw a couple video demos recently, and was horrified that it seemed one had to memorize a dozen key binding shortcuts to really use it. Whoa! You have to _learn_ something to use it well? Yikes. Not for me.

conventions are a good things so you can minimise relearning.

Re: Omarchy: Any User Process Can Escalate to Root

#160

Post by teekert »

mike_hearn wrote: post #114
concinds wrote: post #48

A few days ago someone found they were flowing USB descriptors straight into the shell. https://github.com/omacom/omarchy/commit/9285b19d6a72eba3df8... Don't use vibecoded distros. It doesn't matter whether they fix this or that, or whether you care about a particular vuln. This is not sensible. It's why you switched away from Windows in the first place, remember?

"Someone" didn't find that, AI found it. So it's not clear what your point is about vibe coding. Would humans have noticed this problem, especially given that it's not remotely exploitable? (you have to plug in a malicious USB device).

It’s that age old “start a docker container with the docker socket in the container and you are effectively root”. What are we talking about here? This is not new?
Post reply on HN