Live data from Hacker News

Todd C. Miller – Sudo maintainer for over 30 years

millert.dev

231–240 of 337 posts

Re: Todd C. Miller – Sudo maintainer for over 30 years

#231

Earlier quoted context omitted.

This is a good example of Diffusion of Responsibility. Everybody thinks somebody else should help, so nobody does.

I mean, he should just put a message when you run sudo the first time asking for funding if he wants it that bad, that should speed things up.

It would be removed by distros. XScreensaver had a notice when user ran old version and Debian removed it.

Re: Todd C. Miller – Sudo maintainer for over 30 years

#234
post #225

Earlier quoted context omitted.

"Done" software is a myth they tell to young developers so that they can sleep easy at night.

Absolutely false. I have built tons of tools which are feature complete and continue to work to this day without intervention. Heck, I even have tools I no longer use that people asked me to keep available because they do, and they’ve been chugging along for over a decade, no bugs or maintenance necessary. Just today I saw a report of Adobe discontinuing a tool in use by professionals because it is done and they don’…

> Just today I saw a report of Adobe discontinuing a tool in use by professionals because it is done and they don’t know what else to add.

Yeah, I'm sure the reason stated by the customer support is the real one, and not the lack of profitability from that tool among a shift of focus towards AI[0] as reported everywhere.

https://techcrunch.com/2026/02/02/adobe-animate-is-shutting-...

> for over a decade, no bugs or maintenance necessary

I'll believe it when I see it. Keeping something running for a long time is a lot easier task than building something that can be run in an ever changing world.

Given that it's that old I'd wager that it isn't runnable on/compileable for ARM64 without some kind of maintenance. And if it's written in an interpretable language there is a good chance that the underling interpreter/runtime are EOL by now.

> A lot of the time, failing to to finish software indicates a badly defined scope.

And a lot of the time finished software becomes unused because it sticks to scopes that don't match up with reality/user needs anymore.

Re: Todd C. Miller – Sudo maintainer for over 30 years

#236
post #198

It's genuinely terrifying to think how much of the modern internet rests on the shoulders of a few people maintaining core utilities like sudo, curl, and openssl for decades. Todd is a legend.

Yes but that would be even more terrifying if it rested on the whims of some soulless corporation.

ms-sudo to Get-AdministratorPermissionForElevatedSecurityOperations

Re: Todd C. Miller – Sudo maintainer for over 30 years

#238

Reading the release history[1]. I'm kind of shocked that sudo gets active development and monthly releases. I would have thought that something this old and venerated would have been "done" long ago. 1: https://www.sudo.ws/releases/devel/

"Done" software is a myth they tell to young developers so that they can sleep easy at night.

There's a difference between software that's "done" (it never needs updates, ever) and software that's done (it only needs maintenance for security and platform churn).

The former is extremely rare; platform churn alone will usually demand updates, even if your code is otherwise airtight. Forces generally beyond your access will demand that your code is able to conform to platform standards. The demand this places can be very variable and depends more on the platform than you. (Windows has low platform churn since it's possible to futz with compat features, Linux is extremely variable on your codebase, MacOS is fairly constant and from what I know about mobile phones, you're basically signing up to forever maintenance duty).

The latter is much more common; sure, sudo still gets updates but most of those won't be new features. Specification wise, sudo is "done". It does what it needs to, it's interface is defined and there aren't going to be any strange surprises when I run sudo between any system made in the past 10 years or so.

The problem is that when you're selling software, demanding compensation for the former is a hard sell since it's things customers won't see or necessarily care about. Demanding compensation for the latter is much more obviously acceptable.

Re: Todd C. Miller – Sudo maintainer for over 30 years

#239

Reading the release history[1]. I'm kind of shocked that sudo gets active development and monthly releases. I would have thought that something this old and venerated would have been "done" long ago. 1: https://www.sudo.ws/releases/devel/

It seems to have features I was not aware of. I would not have guessed that it contains anything networking-related.
Post reply on HN