Re:Beware of sudo on OS X
by spitfire on Sunday August 16, 2015 @05:22PM
(#10070322)
Funny, I always thought this was supposed to be a feature.
It remembered your authentication for a few minutes after using sudo. I assumed it was part of the OSX auth system and would forget if you locked the screen.
[ Parent
| on HN ]
Enabling `tty_tokens` still remembers your authentication for a few minutes, but it restricts use to the terminal it was run on.
Yeah I was thinking the same thing, probably that is why they ship those defaults, better UX.
Re:Beware of sudo on OS X
by marcoamorales on Monday August 17, 2015 @12:15AM
(#10071357)
Don't call a security flaw a UX feature please.
Passwords are both security flaws and UX features -- they're inherently flawed, cannot be fixed, and are the only authentication system most people can use successfully.
Security is always in tension with usability.
Re:Beware of sudo on OS X
by chadzawistowski on Monday August 17, 2015 @04:43PM
(#10075979)
I think the flaw marcoamorales intended to point out is how sudo doesn't always re-prompt for a password.
It is a feature that it caches your authentication for a few minutes. It's not a feature that other processes running as your user, such as something that manages to do a sandbox escape in your browser, are also able to acquire credentials.