Live data from Hacker News

Todd C. Miller – Sudo maintainer for over 30 years

millert.dev

191–200 of 337 posts

Re: Todd C. Miller – Sudo maintainer for over 30 years

#191
post #138

Earlier quoted context omitted.

Whenever people say that MIT or GPL licenses are a good idea I point out projects like this. Only humans should have freedom zero. Corporations and robots must pay.

The behavior of corporations is shameful. After all, people in these companies don't work for free and are able to spend a lot of money for other services.

Haven't you just hit the nail on the head? Corporations do not feel shame even if people within them do; hence actions . . .

Re: Todd C. Miller – Sudo maintainer for over 30 years

#192

Reading the release history[1]. I'm kind of shocked that sudo gets active development and monthly releases. I would have thought that something this old and venerated would have been "done" long ago. 1: https://www.sudo.ws/releases/devel/

pros and cons to this approach, like the CVE introduced in sudo 9.1.14 (June 2023) fixed in 1.9.17p1 (June 2025). https://www.cve.org/CVERecord?id=CVE-2025-32463

But also sudo has A LOT of features that 95% of people don't use. Just checkout `man sudo` to get a sense for this. And it includes plugins like the popular visudo plugin. You can see from the release cadence that real improvements continue to be made. Though it is a bit more work to secure a moving target.

Re: Todd C. Miller – Sudo maintainer for over 30 years

#193

Earlier quoted context omitted.

Whenever people say that MIT or GPL licenses are a good idea I point out projects like this. Only humans should have freedom zero. Corporations and robots must pay.

> Corporations and robots must pay. Greenpeace is a (non-profit) corporation. Unions are corporations. Municipalities. Colleges and universities. * https://en.wikipedia.org/wiki/Legal_person Should they have to pay?

I used to volunteer for a local non-profit a few years ago.

From time to time, I would reflect on the fact that Microsoft and other commercial suppliers were getting paid for providing services to us, but I was expected to work for free.

Re: Todd C. Miller – Sudo maintainer for over 30 years

#194

Earlier quoted context omitted.

GPL is a response to the copyright law, which was created for the big corporations to extract rent from ordinary people. It's copyright law which should go away.

Copyright law is hundreds of years old and originally was intended to prevent owner-operators of mechanical printing presses from printing and selling copies of some author's books without paying them or getting permission.

> originally was intended to prevent owner-operators of mechanical printing presses from printing and selling copies of some author's books without paying them or getting permission.

We agree that that was its initial stated intention.

However, what we have seen in practice is that it has resulted in the owner-operators of those machines banding together to restrict access to the machines unless authors sign exploitative contracts assigning their rights to the operators (which they interpret as "getting permission").

Re: Todd C. Miller – Sudo maintainer for over 30 years

#195

Earlier quoted context omitted.

> sudo has functionality to talk to LDAP That is scary! I may need to look more at openbsd

There's a Linux port of doas named OpenDoas

Distros come with sudo. Scripts assume sudo. Complexity exists there.

Re: Todd C. Miller – Sudo maintainer for over 30 years

#196

Earlier quoted context omitted.

I don't think they even see it as their responsibility, more, "If he wanted money, he should have charged for his software".

If he actually did charge money someone else would've written an implementation of sudo to solve their own needs and avoid the overhead of transacting with a random developer.

And then "If he wanted money, he should have charged for his software" would apply to that someone.

Re: Todd C. Miller – Sudo maintainer for over 30 years

#197

Reading the release history[1]. I'm kind of shocked that sudo gets active development and monthly releases. I would have thought that something this old and venerated would have been "done" long ago. 1: https://www.sudo.ws/releases/devel/

Yeah, silly as it is, I guess it didn't even occur to me that sudo had a developer or maintainer, or was even a "program"; to me it has been one of those things that has and always will exist and I had just assumed it evolved and came about alongside Cro-Magnon man.

But of course, that's silly. Of every piece of software has to be written. I should probably throw the guy a few bucks, considering his code runs in basically every big script on the planet.

Re: Todd C. Miller – Sudo maintainer for over 30 years

#198

It's genuinely terrifying to think how much of the modern internet rests on the shoulders of a few people maintaining core utilities like sudo, curl, and openssl for decades. Todd is a legend.

Yes but that would be even more terrifying if it rested on the whims of some soulless corporation.

Re: Todd C. Miller – Sudo maintainer for over 30 years

#199

Earlier quoted context omitted.

wireguard is relatively "done"

"relatively" is just a word added to done and the fact that there is a qualifier precludes the word from bearing truth.

Out of curiosity, what changes would it have at this point?

Re: Todd C. Miller – Sudo maintainer for over 30 years

#200
post #89
post #60

Earlier quoted context omitted.

> A production environment should usually be setup up properly with explicit roles and normal access control. … and sudo is a common tool for doing that so you can do things like say members of this group can restart a specific service or trigger a task as a service user without otherwise giving them root. Yes, there are many other ways to accomplish that goal but it seems odd to criticize a tool being used for its o…

PSA for anyone reading this, you should probably use polkit instead of sudo if you just want to grant systemd-related permissions, like restarting a service, to an unprivileged user. It's roughly the same complexity (one drop-in file) to implement.

What's the benefit?
Post reply on HN