News for hackers. Stuff that matters.
Re:When was the famous "sudo warning" introduced? Under what... by mrweasel on Monday December 02, 2024 @07:35AM (#42295577)
We had a client insist that the SSH prompt be changed to include a half-page rambling about it being an "proprietary system" and "access prohibited for non-authorized users", something like that. Failing to include their specific wording, when we did their new staging setup, was a critical, must fix now bug.

Their argumentation was that it was a regulatory requirement and would allow for prosecution.

Re:When was the famous "sudo warning" introduced? Under what... by hiatus on Monday December 02, 2024 @10:28AM (#42297120)
This is a regular sight when accessing a US government computer system. Even managing things like Global Entry come with such a warning.
Re:When was the famous "sudo warning" introduced? Under what... by amazinzay on Monday December 02, 2024 @11:41AM (#42297853)
These types of messages largely stem from NIST 800-171 (and related standards). Specifically NIST 800-171 has the control "Display a system use notification message with privacy and security notices consistent with applicable CUI [controlled unclassified information] rules before granting access to the system." So it is very common when dealing with companies that are government contractors or subcontractors. 800-171 also sometimes gets used as a security framework even when not dealing with the government so these requirements sometimes end up outside those contexts as well.