Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords

pbxscience.com

Post reply on HN
Print view View original

361–370 of 421 posts

Re: Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords

#361

Post by crazysim »

pseudohadamard wrote: post #347
written-beyond wrote: post #9

The number of times I've been stuck wondering if my keystrokes are registering properly for a sudo prompt over a high latency ssh connection. These servers I had an account setup too were, from what I observed, partially linked with the authentication mechanism used by the VPN and IAM services. Like they'd have this mandatory password reset process and sometimes sudo was set to that new password, other times it was w…

I wonder if it'll stick though? Some years ago FreeBSD changed their setup so the initial password you set on install was echoed back to you so you could verify that the thing that'll completely lock you out of the system if you get it wrong is correctly set up. The response was total hysteria. Apparently people were setting up their 1U rack-mount servers while riding the No.8 bus and were worried other passengers we…

Did that echo the password back on the screen or just asterisks?

Re: Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords

#362

Post by uecker »

seba_dos1 wrote: post #224
uecker wrote: post #217

Earlier quoted context omitted.

Is there a fully usable Linux phone nowadays?

Over the decades I have used Neo Freerunner, Nokia N900 and now Librem 5. All of them were fully usable, though I'll admit the first one required quite some patience (similarly to the PinePhone these days I'd say).

Thanks! I will consider the Librem 5 for my next phone.

Re: Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords

#363

Post by croes »

hananova wrote: post #337
croes wrote: post #238

Earlier quoted context omitted.

Knowing the length makes is defined easier, maybe not easy but easier.

It saves 1/Nth of the total time taken to brute force an N character password compared to starting from length 1. So any password where this is a significant fraction is so short that the time saved isn't really relevant. So yes, "easier", technically. But not in any meaningful way.

Unless you attack a group and want to know which target has an easier to brute force password.

Re: Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords

#364

Post by fulafel »

macintux wrote: post #328
eptcyka wrote: post #184

Earlier quoted context omitted.

The Just in that sentence is wholly unjustified. There are plenty of cli/tui/console/shell shortcuts that are incredibly useful, yet they are wholly undiscoverable and do not work cross-platform, e.g. shell motions between macOS and reasonable OSes.

The number of times I’ve attempted to use Ctrl-U in a Python shell only to discover it doesn’t work…

Haven't seen this - shouldn't this always work on unixy platforms? If using readline/editline it works, and if built without it also works.

Re: Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords

#365

Post by [deleted] »

eptcyka wrote: post #184
larsbrinkhoff wrote: post #175

Earlier quoted context omitted.

Just type Control-U once.

The Just in that sentence is wholly unjustified. There are plenty of cli/tui/console/shell shortcuts that are incredibly useful, yet they are wholly undiscoverable and do not work cross-platform, e.g. shell motions between macOS and reasonable OSes.

[deleted]

Re: Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords

#366

Post by tspng »

larsbrinkhoff wrote: post #175
mbesto wrote: post #170

Earlier quoted context omitted.

The number of times i realized half way that I probably posted the wrong password and so I vigorously type the 'delete' key to reset the input is too damn high

Just type Control-U once.

That's great. I've been using terminals for 20+ years, and never new about CTRL-U. Thanks! TIL.

Re: Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords

#367

Post by adastra22 »

leptons wrote: post #352
bxparks wrote: post #260

Earlier quoted context omitted.

I felt this pain yesterday. I use Open Core Legacy Patcher (OCLP) to run modern macOS on old Intel macs. The first time the computer boots after an upgrade (e.g. Sequoia 15.7.3 to 15.7.4), it is slow as a dog. Because the macOS upgrade clobbers all the OCLP driver patches. By "slow", I mean each keystroke on the login screen takes about 20-30 seconds for the corresponding bullet to appear in the password box. The log…

That's exactly the situation I wanted to avoid with our aging macbook. I knew it would be a hacky mess trying to keep beating that dead horse to get it to run the latest OS. We couldn't update some software that required us to be on the latest version of MacOS (Signal desktop), so the laptop became prematurely obsolete. We bought a Windows PC instead.

OCLP works fine.

Re: Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords

#370

Post by indrora »

tankenmate wrote: post #207
ornornor wrote: post #179

Earlier quoted context omitted.

Around 2004 someone gave me Linux CDs (I think it was mandrake?) that I tried to install. And I got stuck at the password input part of the setup, I thought it didn’t work and went back to windows. I didn’t start using Linux until 13 years later… I think I’d have switched much earlier if not for that weird UI decision.

This decision long predates Linux. It's been a staple back to the earliest days of Unix; and it isn't a weird decision if you take into consideration of multi user systems in office environments that have non trivial security considerations (for example telecoms companies), which is exactly where Unix came from.

It was directly a result of some of the choices made by Bell and plausibly Teletype.

Early switching computer systems that had user accounts at Bell also didn't echo back for passwords as some terminals were mixed-duplex, from what I've gleaned in the very odd corners of ESS systems. I suspect the idea is that the model they were working from were touchtone telephones and rotary phones, so numeric passcodes were the standard, and you heard & saw those already? Less noise on paper tapes? The possible list of options goes on and on.

Bell Labs was... Different than your average office or telco environment, I should add.

But that's a swag at best today, without knowing the people that worked on it.

Post reply on HN