Live data from Hacker News

Memory-safe sudo to become the default in Ubuntu

trifectatech.org

81–90 of 282 posts

Re: Memory-safe sudo to become the default in Ubuntu

#81
post #78

> Ubuntu is the most widely deployed Linux operating system Nitpicking, but I thought Android was the most widely deployed Linux OS around...

That's the logic Oracle uses to say Java is the most widely deployed language in the world, because it runs on phone sim cards and credit cards

Re: Memory-safe sudo to become the default in Ubuntu

#83
post #78

> Ubuntu is the most widely deployed Linux operating system Nitpicking, but I thought Android was the most widely deployed Linux OS around...

Android uses the Linux Kernel, but iirc (correct me if I'm wrong), it doesn't come with the required application to make it Unix and hence is not the Linux operating system. That would mean it's only using the same kernel as the Linux operating system?

Idk, just speculating to maybe get the thought process

Re: Memory-safe sudo to become the default in Ubuntu

#84
post #35

Earlier quoted context omitted.

The other big thing iirc is they’re all MIT licensed rather than GPL(et variants) licensed

Sudo is permissively licensed. https://www.sudo.ws/about/license/

Ah, interesting to know. I guess it is only the coreutils stuff where that is a concern

Re: Memory-safe sudo to become the default in Ubuntu

#86
post #46

Earlier quoted context omitted.

GNU sort of lost its way around GPLv3 (it gives cloud services a free pass, but not locally run software, which is the opposite of letting users control what their computer does). That killed most of the “user freedom” enthusiasm of the early days. These days, there’s the AGPL, but that’s mostly used like the BSL (“if you want to use AGPL in production, pay us”), than for bootstrapping freedom-respecting compute envi…

What kind of free pass would you want to give to locally run software? Can't you already do anything you want to GPL code locally?

I think it is not that local code does not get a free pass by itself but the combination.

By letting cloud services that use GPL software stay closed source it actively encourages development of cloud based tooling in a commercial context and users end up getting forced to sign up with and connect to a closed source cloud service they have even less control over than traditional locally running closed source software.

I think Stallmans motivation for the FSF includes a story about modifying a driver for a printer to support new features. Now imagine if that printer had a cloud based interface and imagine how the GPL would help Stallman add features for a new printer to it. It doesn't, if he wanted to fix the interface he would have to reverse engineer it from scratch. 40 years of FSF and it lets a decades old trend run circles around its goals.

Re: Memory-safe sudo to become the default in Ubuntu

#87
post #75

Earlier quoted context omitted.

>I don't think you can realistically enforce a security boundary between root, and a user account that occasionally elevates. So stop doing that!

What should you do instead?

Design the system so that you do not need users to escalate to root. Find each use case where a user may want to use sudo and then come up with an alternate way to accomplish that action from a regular account.

Re: Memory-safe sudo to become the default in Ubuntu

#88
post #24

Earlier quoted context omitted.

We've accepted it at this point, but I wonder if the religious element of GNU tools and free software in general was as contentious way back when.

A little while ago I realized with a start that it's been years since I've heard anyone angrily insist on calling it "GNU/Linux", when that was constant background noise during the Slashdot era. One of those old fights that just faded away, I guess.

A lot of the userland _isn't_ GNU any more, people use a lot of alternatives for once much more dominant GNU tools, and people use a lot more commandline tools which have no relation to GNU. Systemd took over and for containers there's no init. Plenty of alternative libc implementations as well.

GNU is nowhere near as dominant in the non-kernel code that people run any longer.

And a lot of the GNU zealots who were particularly interested in getting credit with naming got old.

Re: Memory-safe sudo to become the default in Ubuntu

#89
post #43
post #18

Earlier quoted context omitted.

> The religious element of rust programmers Yeah. I too, hate the Rust Evangelically Orthodox Later Day Christians. Oh, wait... You're serious. What is religious about rewriting tools in Rust? Isn't that what most programmers do for fun and learning? Is it any more religious than worshiping Alan Kay or Dijkstra? > It makes me wonder how much is motivated by stuff other than what’s actually the best outcome. Looks in…

> What is religious about rewriting tools in Rust? "Religious" isn't being used to refer to people rewriting tools in Rust. It's used to refer to people zealously commenting on message boards that every single tool ever built should be rewritten in Rust, and if you aren't rewriting your tool in Rust, you're an idiot.

> It's used to refer to people zealously commenting on message boards that every single tool ever built should be rewritten in Rust.

Ok, but between me, GP and the article, who said that? Where are the Rabid RIIR fans?

And before you misquote me, I said, why wouldn't you rewrite stuff in Rust, if the status quo is ridden with bugs, and safety issues? And why shouldn't a Linux distro switch to it if they desire.

Post reply on HN