Re:PAM Duress – Alternate passwords for panic situations
by wowaname on Monday August 23, 2021 @09:15AM
(#28275206)
Are you seriously writing a script when the cops are at your door? No, you aren't. You always need to verify that your protective mechanisms work before actually relying on them.
[ Parent
| on HN ]
Re:PAM Duress – Alternate passwords for panic situations
by sleavey on Tuesday August 24, 2021 @05:39PM
(#28295334)
As I alluded to in my original comment, you might not pick up on a transient error like an I/O error during testing. This is exactly the sort of thing a sensible default setting in the program should cover.
Re:PAM Duress – Alternate passwords for panic situations
by wowaname on Wednesday August 25, 2021 @05:42PM
(#28307463)
I'm sorry but error handling and testing requirements are true for any software or script a person writes. The application should not give a shit, and a simple execve() is the best way to go about it. It's the principle of least surprise, and people have had to keep in mind fork/exec semantics for decades.