Hacker News new | ask | show | jobs
by jMyles 3804 days ago
> Non-technical users do not use sudo, but they do use a web browser.

Your casual casting of a swath of the population as "non-technical" notwithstanding, the point is still sound: why do you think that it's worth gutting this feature as a safeguard against someone being fooled into navigating to "about:config" but not worth removing sudo for the same reason?

If someone can be persuaded to abuse "about:config", why not sudo?
1 comments
cpeterso 3804 days ago
90% of web users are on Windows, where there is no sudo. Malicious add-ons make money by injecting ads, overriding default search engine settings, capturing login credentials or even local files, or installing zombie spam relays. sudo is unnecessary for these attacks. How does one make money with sudo?

And as for locking down sudo, OS X is now "rootless" (System Integrity Protection) by default, preventing even sudo access from modifying some system settings.

link
jMyles 3804 days ago
> 90% of web users are on Windows, where there is no sudo.

This argument is becoming increasingly specious.

Firefox is the default browser on Ubuntu, where there is sudo. So do you acknowledge that it is consistent to keep this preference in at least the linux version of FF?

link