News for hackers. Stuff that matters.
Re:Postmortem: TanStack npm supply-chain compromise by lrvick on Monday May 11, 2026 @10:49PM (#48103628)
In my case I use QubesOS so sudo is useless even if present since every security domain is isolated by hypervisor.

For servers, sudo or a package manager etc should not exist. There is no good reason for servers to run any processes as root or have any way to reach root. Servers should generally be immutable appliances.

There are no comments on this comment yet.