News for hackers. Stuff that matters.
Re:The security hole in sudo by tallanvor on Wednesday May 23, 2012 @02:08PM (#4014411)
No, it's not administrator by default. The first user created is an administrator, but that user normally runs in a standard user security context. The prompt provides a temporary elevation to administrator level by use of an administrative security token associated with the account. The prompt also runs in a separate desktop to prevent malicious code from interfering with it.

If you try creating a new user through the control panel, you'll notice that the default selection is to create a standard user.

Re:The security hole in sudo by gnaritas on Wednesday May 23, 2012 @03:11PM (#4014766)
> The prompt provides a temporary elevation to administrator level by use of an administrative security token associated with the account.

Rather what I said. A borked version of sudo.