• 2 Posts
  • 146 Comments
Joined 1 year ago
cake
Cake day: June 10th, 2023

help-circle



  • The problem is always having the bad option being enabled by default. Not even the ads are the biggest problem. I didn’t even mention their current ads in the terminal. The problem is the same Microsoft is having now, that your keyboard input gets sent to an untrustworthy third party.

    Your comment got cut off. If you wanted to dispute the paid paid claim. It is about Ubuntu Pro, that’s literally all what the basic tier is. We recently even had the case where a patch with a highish CVE rating was only available to subscribers of the service. We also verified that the same patch was already available on Debian. Even without my anecdote it should be obvious why it is bad.







  • sudo is not simply a tool to give admin privileges, but a tool to manage elevated permissions or run commands in a different users context.

    These things become a lot more relevant once you use the tools professionally. In a well configured system you are only allowed to run the things you are explicitly allowed.

    To be completely honest sudo is basically pointless in a single user context. There is almost no reason to even have it installed. It makes dealing with different environments easier though.

    Anyway as I said it does not matter in many cases if you are the systems administrator. On the other hand there is also no benefit in getting used to bad practices in case you have to unlearn them later.

    One more thing: what you suggest with chroot is one of the very reasons why you should not do that. You might have handed over the keys to break out of chroot. It is a well known vector which boils down to never run anything as root in a chroot environment.


  • sudoedit opens the editor as your user and just writes the file as root. For a single user who is also admin on the system this does not matter in many cases.

    In a multi user context you can easily escape your editor and run a shell which allows a non admin user to escalate their privileges. So from a security implementation standpoint this must exist and it does for this reason.

    Of course this also prevents some mistakes from happening and a bad plugin cannot destroy your whole system easily and so on. It boils down to good practice.




  • They stopped being fun 10-15 years ago. Back then people started figuring out the new touch input for games which lead to many simple, but creative games.

    Nowadays, it feels like there exists nothing noteworthy in this space. Most are just boring clones of clones of clones riddled with ads and other garbage. I was unable to find even one game worth installing on my phone the past few years.

    I don’t know what I am looking for at this point. I love casual games and play a lot on PC or my Steam Deck and it is so much easier to find something there which isn’t just a cheap money grab.


  • It kinda is though. Iirc it received an interrupt it shouldn’t have received and doesn’t know how to resolve. It is not supposed to ignore it, but then the only other option is crashing at this point. Basically it continues in a dazed and confused state.

    Of course the message could be clearer, but at least it also makes the message easily searchable.