Re:My entire PC got wiped Do not download
by randomhodler84 on Friday March 18, 2022 @02:59AM
(#30719339)
It kinda does… root can write to places that the user cannot. Like Boot partitions, or entire device nodes, or load kernel modules that the user cannot see. That xkcd is a funny historical joke, but the root/user distinction is still a critical part of operating system security today.
But it is true. Who cares if the program can write to your system configuration when it can encrypt your entire home directory and use your private SSH keys to encrypt all your servers as well.
I'd argue the root/normal user separation is largely useless on single user desktop computers.
Re:My entire PC got wiped Do not download
by randomhodler84 on Friday March 18, 2022 @04:51AM
(#30719921)
Presumably only the homedirs of the servers.
You want a world where a browser exploit can drop a bootkit? Nahhh
They could just drop something in bashrc or somewhere else for a persistent exploit. The system files contain nothing worth touching on a personal device.
Re:My entire PC got wiped Do not download
by randomhodler84 on Friday March 18, 2022 @07:50PM
(#30729173)
Persistent userspace. And while I understand privesc in major platforms is not the insurmountable problem it seems, it is still a layer of protection important to the model of preventing SMM, hypervisor efi boot and root level persistence, without something else up its sleeves.
Snapshots on an external system is useful but few are disciplined enough to take regular enough snapshots.