Hacker News new | ask | show | jobs
by andyroid 2053 days ago
Pretty much all servers I’ve ever worked with was multi-user. What’s even the alternative? A single account shared by all admins? That sounds like a nightmare from both a security and an auditing perspective.
1 comments

But in that case hopefully all the admins are trusted. Parent was talking about untrusted users.
Right, my response was primarily to the claim that “there are so few multi user machines in existence”.

As for trust, there are probably few, if any, attack vectors more common than privilege escalation, so I’m not sure I follow that line of reasoning either.