Hacker News new | ask | show | jobs
by Enginerrrd 2419 days ago
Uhm, sudo on a proprietary binary outside the repo? ...Yeah no thanks.
1 comments

What difference does it make really. Running a program on linux as a regular user can access all of your files, record your screen, keylog you, grab your passwords from your browser, do basically anything. Run it with sudo and what more can it do? Mess up your grub config? If a malicious program was run as a regular user it could basically ruin everything you care about unless you happen to be sharing a computer with multiple people but even then it could just wait until you run something with sudo and keylog your password.
How could a unprivileged program keylog my sudo typings? (I am running Wayland)
What CPU are you running? Spectre mitigations enabled? Hyper Threading?
Greater issues with possible persistence, control over daemons and sockets, access to lots of files I don't let regular users have access to, etc.

Plus the other half which is the whole proprietary binary side of things. IMO, lack of transparency invites more bad behavior.