Collaborate Disseminate
Windows only show [Yes] or [No] for the same thing as Linux’s sudo. macOS/Linux both require you to type the password. Is the password-less Windows implementation almost as secure as password-requiring macOS/Linux’s impersonations? If so, … Continue reading Is Windows UAC’s clicking OK authentication as secure as macOS/Linux’s password authentication?
This question relates to a comment on a question I posted at https://askubuntu.com/questions/1426688/sudo-with-a-userid-reverting-old-behaviour?noredirect=1#comment2484447_1426688
Specifically, in Ubuntu 18.04 I could run a command like &q… Continue reading sudo with a USERID
TL;DR: running npm i … not long after pass my-password allows a malicious package to steal my entire password store.
I use pass as a password manager, on Linux. And like probably all Linux users, I use sudo to run commands as root.
The … Continue reading How to securely use `pass`, `sudo`, and `npm` on the same machine
If there is a program written by a normal user that requires root privileges (eg. a program that interacts with root processes) what is the difference between running this program using sudo vs. changing the program permissions with chown … Continue reading Security difference between changing permissions versus using sudo to execute
I had a debate with a friend about the security model in new OS X versions. OS X El Capitan and newer have the System Integrity Protection security feature which protects aspects of the OS even from root users.
My friend claimed that it’s … Continue reading Read files protected with System Integrity Protection with sudo
I want to use gpg from another user (user2), so that the primary user (user1) does not have access to the encrypted file, but only to the part the script will output.
Added a sudo rule for user1 to run /bin/gpg as user2. When I try to exec… Continue reading Using GPG from another user (GNU/Linux)
We have automated a lot of things for server startup via cloud-config, and I want confirmation about whether there is any security concern in the following.
users:
– name: myuser
groups: sudo
shell: /bin/zsh
…
runcmd:
# ch… Continue reading Secure method of creating sudoer password through cloud-init
I have a linux instance deployed on AWS EC2.
Sorry for my dumb question, but I’ll ask anyways just to be safe.
Q1. While creating an instance, I set anyone 0.0.0.0:0 for the ssh. Though, on the next step, it asked me to create private/publ… Continue reading ec2 instance insecure to allow ssh to any ip address
Sudo and Opendoas on Linux use timestamp files to keep track of how long it’s been since you’ve last entered your password. Doas on BSD uses a kernel feature instead.
Why is the latter considered more secure?
Continue reading Why is sudo’s usage of timestamp files insecure?
Sudo and Opendoas on Linux use timestamp files to keep track of how long it’s been since you’ve last entered your password. Doas on BSD uses a kernel feature instead.
Why is the latter considered more secure?
Continue reading Why is sudo’s usage of timestamp files insecure?