undefined | Better HN

0 points0x011y ago0 comments

But in almost all cases, the juicy data is in the user account. That's more important than leaking or deleting /bin/ls. :)

0 comments

swartkrans11y ago

Yes if anyone ever got access to my user on my local dev machine, the gig is up. Although we keep production sensitive stuff gpg encrypted and require a password to decrypt, but there is so much information and data in my user home, you don't need super user access to cause damage.

AceJohnny211y ago

Indeed, and I hadn't thought properly about it until XKCD, as often, shone a bright light on the nonsense that is root password paranoia: http://xkcd.com/1200/

Which leads me to better respect what Ubuntu was doing with the Yama ptrace scope limiting (which prevents you from debugging a running process even if you're the same user, unless you change a /proc/sys var), and why the Weyland developers are wringing their hands on how to properly handle graphical app communication privileges (because currently, X11 allows any process to view any other process's display and events, including keyboard input)

j / k navigate · click thread line to collapse

0 comments

swartkrans11y ago

AceJohnny211y ago

Indeed, and I hadn't thought properly about it until XKCD, as often, shone a bright light on the nonsense that is root password paranoia: http://xkcd.com/1200/

j / k navigate · click thread line to collapse