News for hackers. Stuff that matters.
Re:The Six Dumbest Ideas in Computer Security by aneesh on Thursday March 19, 2009 @02:53AM (#522977)
> The cure for "Enumerating Badness" is, of course, "Enumerating Goodness." Amazingly, there is virtually no support in operating systems for such software-level controls

The closest an OS has come to "enumerating goodness" is the User Access Control (UAC) introduced in Vista that, among other things, blocks any executable from running as Administrator until you say "Yes, please run this" at least twice. While well-intentioned, that frustrated most users to no end. So it's not as simple as the author may think.

Re:The Six Dumbest Ideas in Computer Security by lsb on Thursday March 19, 2009 @02:58AM (#522984)
Alternately, /etc/sudoers and explicit instructions to escalate privilege.