this post was submitted on 03 May 2024
995 points (97.0% liked)

linuxmemes

21226 readers
87 users here now

Hint: :q!

Sister communities:

Community rules (click to expand)

1. Follow the site-wide rules

2. Be civil
  • Understand the difference between a joke and an insult.
  • Do not harrass or attack members of the community for any reason.
  • Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
  • Bigotry will not be tolerated.
  • These rules are somewhat loosened when the subject is a public figure. Still, do not attack their person or incite harrassment.
    • 3. Post Linux-related content
  • Including Unix and BSD.
  • Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of sudo in Windows.
  • No porn. Even if you watch it on a Linux machine.
    • 4. No recent reposts
  • Everybody uses Arch btw, can't quit Vim, and wants to interject for a moment. You can stop now.

    • Please report posts and comments that break these rules!

    founded 1 year ago
    MODERATORS
    poopsmith@lemmy.world
    zephyr@lemmy.world
    rtxn@lemmy.world
    995
    Security (discuss.tchncs.de)
    submitted 6 months ago by smileyhead@discuss.tchncs.de to c/linuxmemes@lemmy.world
    133 comments fedilink hide all child comments
     
    you are viewing a single comment's thread
    view the rest of the comments
    [–] ExfilBravo@lemmy.world 14 points 6 months ago (3 children)

    Everyone knows most people turn UAC completely off after it nags them for the 10th time and they get frustrated and dump it.

    [–] lightnegative@lemmy.world 18 points 6 months ago (1 children)

    I turn UAC off before it nags me for the 10th time.

    The only nag I want to see is the one right before it gets turned off.

    I hate things that just throw up nag screens that users get desensitized to and just click through anyway. It hasn't increased security at all.

    Looking at you "do you trust the authors of the code in this workspace folder" VSCode. Yes I effing do, that's why I opened it to begin with!

    [–] DrGunjah@lemmy.world 5 points 6 months ago (1 children)

    Fair enough but then you shouldn't complain about the lack of confirmation (like the meme does)

    [–] eager_eagle@lemmy.world 8 points 6 months ago (1 children)

    It's still a valid complain, but the problem is not exactly the presence or absence of a confirmation IMO, it's a deeper matter.

    What causes user desensitization (I guess that's a word) is a direct result of how Windows users traditionally install software - from untrusted sources or by downloading them directly from a vendor's website then manually installing it.

    UAC would be just fine if it was a rare thing to see, but because of this "download a .exe > double click > install" flow users see it all the time, which defeats the purpose of the warning. It became just another half-measure Windows has implemented.

    [–] Buddahriffic@lemmy.world 2 points 6 months ago

    And it's unhelpful because it doesn't give any details about what it wants to do with that admin access and also treats permission for one action as permission for all actions (not that you can tell what they first action you're permitting is).

    I like the way android does it, where you can grant or revoke special permissions by category of action.

    Though the system I'd like to see is one where each program is sandboxed and then even you close the program (or it prompts for an elevation), then you get a list of system differences between the sandbox and your system and can choose whether and which changes to push from the sandbox env into the main env. Or to combine sandboxes so that programs can interact with each other.

    [–] DrGunjah@lemmy.world 9 points 6 months ago (1 children)

    Yeah maybe, but if that exact same people would use linux they would sudo or 777 everything which wouldn't be much better security wise

    [–] ulterno@lemmy.kde.social 13 points 6 months ago (1 children)

    Let me introduce you to a plethora of industry RedHat users who log into GUI as root for 8 whole hours, everyday.

    [–] letsgo@lemm.ee 0 points 6 months ago (1 children)

    Sure but if you're doing rooty stuff all day then sudo you're sudo not sudo going sudo to sudo type sudo sudo sudo every sudo fucking sudo time sudo you sudo want sudo to sudo do sudo something. And yeah it sudo caches it for sudo a bit but sudo it's still too sudo much.

    [–] ulterno@lemmy.kde.social 1 points 6 months ago* (last edited 6 months ago)

    #: I'm just going to write some memos in WPS Office and send it to the networked ftp server running on Binbos. Oh and while I'm at it, I'll just ssh into a few other computers as root, using Nautilus (as root of course) and keep them all open until I shutdown, just because I want to copy their docx files.

    [–] Jakeroxs@sh.itjust.works 2 points 6 months ago

    I leave it on, only really need it for installing programs, even them a lot of them go into app data these days by default