Earlier quoted context omitted.
Or when using vi, just use :wq!
shift Z Z is faster.
[offtopic] zoinks fam that's some next-level bikeshedding
Use Touch ID for Sudo on Mac
81–90 of 221 posts
Re: Use Touch ID for Sudo on Mac
#82This made me realize my usage of sudo has gone down quite a bit. It seems like things mostly get permissions right these days, brew and ports were the main culprits back in the day.
Re: Use Touch ID for Sudo on Mac
#83This is amazing -- but every. single. update. disables it again Why does the sudo file not persist between updates? This case is quite minor for personal computers, but what about companies that log in with yubikeys or smart cards? Do they have to reconfigure after every update too?
curl -sL https://gist.githubusercontent.com/RichardBronosky/31660eb4b... | bash
This helps.
Re: Use Touch ID for Sudo on Mac
#84The article will not allow sudo changes on Big Sur - at least, not without changing permissions of the sudo file first: 1. sudo -Si 2. chmod 644 /etc/pam.d/sudo 3. vi /etc/pam.d/sudo 4. Add the 'Auth sufficient pam_tid.so' line 5. chmod 444 /etc/pam.d/sudo 6. ... 7. Profit! Very handy tip though, thanks!
:w!
Re: Use Touch ID for Sudo on Mac
#85This made me realize my usage of sudo has gone down quite a bit. It seems like things mostly get permissions right these days, brew and ports were the main culprits back in the day.
I was thinking the same thing. Since I got my MBP16 I think the only times I’ve typed a password at all have been when the Touch ID session expires or whatever it is that requires reauth.
Re: Use Touch ID for Sudo on Mac
#86> Since you expect to be be typing in a command line, moving your finger to touch the key is probably not very efficient. Why is this not very efficient? Isn't moving my finger to touch the key equivalent to a single key stroke? How is a single key stroke less efficient then many key strokes?
Admittedly I've never used Mac's implementation but I could see a slowdown if it takes longer for the fingerprint to register that it takes to type your password (which is probably the fastest combination of characters you can type)
Normally I can type my password faster than pretty much any other activity. But on my MBP (with the terrible keyboard) I never know if all of my keypresses registered (or if some of them were duplicated).
Re: Use Touch ID for Sudo on Mac
#87Earlier quoted context omitted.
Admittedly I've never used Mac's implementation but I could see a slowdown if it takes longer for the fingerprint to register that it takes to type your password (which is probably the fastest combination of characters you can type)
From my experience it's much faster. Just the tiny fraction of a second that it takes me to look at my caps lock key to verify that it's not on takes longer than my fingerprint scan and at that point I haven't even typed a single letter yet :) Also it's arguably not the fastest combination of characters I can type, because my password is not "test1234" and I don't get much opportunity to type it at all anymore since…
> Just the tiny fraction of a second that it takes me to look at my caps lock key to verify that it's not on
I always just re-assign the caps-lock key to CTRL.
Re: Use Touch ID for Sudo on Mac
#88Earlier quoted context omitted.
Your mother doesn't view you through a 0.3MP camera in a dimly lit room with no flash when deciding if the person in front of her is her child. Further, if I take a high resolution photo of you, and then go to your mom and ask for money by presenting her the picture, she won't accept that picture as proof that I am you (although she may suspect I'm blackmailing or otherwise threatening you). This, moreso than qualms…
So your qualm is low quality biometric scanning, not biometrics itself? So we agree that biometrics are the most secure form of authentication and we are only debating on the quality of the technology, which we know is getting better day by day, yeah?
> Further, if I take a high resolution photo of you, and then go to your mom and ask for money by presenting her the picture, she won't accept that picture as proof that I am you (although she may suspect I'm blackmailing or otherwise threatening you). This, moreso than qualms about the resolution/quality of the sensor is the GP's point. If the sensors are accurate, that specific set of bits that is translated as your fingerprint will not change. If someone knows those bits, it's extremely likely they can convince the sensor they are you. From our example, once I have your picture, I can tell your mother I'm you--and she'll believe me!
You skipped the second paragraph, so I helpfully requoted it.
Re: Use Touch ID for Sudo on Mac
#89As a side note, there's also the wonderful pam_yubiko module that allows you to require touching your yubikey to sudo or login.
wow... thanks for that. Didn't know that. Will need to read on that as well...
Re: Use Touch ID for Sudo on Mac
#90What exactly is the point of sudo/UAC these days of single-user machines? I think https://xkcd.com/1200 put it well. Anything running as an unelevated user account can access my browser sessions where it can steal my passwords, emails, other other private info. It can turn on my microphone and camera. It can read all of my documents. Those are the things I care about protecting, not whatever special things root can do like install drivers and create virtual network interfaces.