News for hackers. Stuff that matters.

A comment on List of Unix binaries that can be used to bypass local security restrictions. Parent comment

Re:List of Unix binaries that can be used to bypass local se... by tureu92 on Friday July 07, 2023 @07:16AM (#36630034)
I think at this point you are solving a wrong problem. Getting root access through X zero days exploits is not so hard. And if you uninstall `sudo` and `su`, and only login as root on dedicated TTY, you have very similar security.

I use Qubes OS for stuff like this. Way better security, no need to juggle tokens, dedicated lans and so on. Only real problem is no graphical acceleration in browser (Google Earth...)

[ Parent | on HN ]
Re:List of Unix binaries that can be used to bypass local se... by chaxor on Friday July 07, 2023 @07:34AM (#36630160)
Doesn't Qubes require like 32GB of RAM just to run?

I would love to use it, but most of the use cases I would like to try it for are much more in the realm of SBCs with 2-8GB of RAM for running services locally. It would be great to have that extra security, but the cost is really really high.

[ Parent | on HN ]
Re:List of Unix binaries that can be used to bypass local se... by tureu92 on Friday July 07, 2023 @07:42AM (#36630224)
systemd-nspawn...
[ Parent | on HN ]
Re:List of Unix binaries that can be used to bypass local se... by colejohnson66 on Friday July 07, 2023 @09:15AM (#36631262)
> Doesn't Qubes require like 32GB of RAM just to run?

32 GB minimum, but 16 GB recommended.[0] I think that's backwards, so I'd say it's actually 16, not 32 required. But yes, that's more than a typical SBC will have. The Pi 4, for example, has a maximum configuration of 8 GB, but some have modded it to have 16 GB.[1]

[0]: https://www.qubes-os.org/doc/system-requirements/

[1]: https://www.techradar.com/news/a-raspberry-pi-4-with-16gb-it...

[ Parent | on HN ]
Re:List of Unix binaries that can be used to bypass local se... by idkyall on Friday July 07, 2023 @10:10AM (#36632036)
> 32 GB minimum, but 16 GB recommended.[0].

I see Memory: 6 GB RAM under Minimum

[ Parent | on HN ]
Re:List of Unix binaries that can be used to bypass local se... by colejohnson66 on Saturday July 08, 2023 @09:18AM (#36644106)
I'm dumb. I read the 32 GB minimum from the "storage" line. Yes, 6 GB RAM is the minimum.
[ Parent | on HN ]
Re:List of Unix binaries that can be used to bypass local se... by bazodedo on Saturday July 08, 2023 @06:31PM (#36649422)
I was curios about that 16GB pi. (I want to have one myself :) Unfortunately, it looks like soldering the 16gb ram chip onto the pi did not increase the usable memory due to other hardware limitations. [1] https://forums.raspberrypi.com/viewtopic.php?t=350514
[ Parent | on HN ]