[hansel_der]

imho a distinct admin account is better than elevating a useraccount, which also runs a browser.

[INTPenis]

Yeah sure but it's still better to lock the root account and create a sudo admin account for all root tasks.

[hansel_der]

sure, security throu obscurity is somewhat valid as the attacker then has to discover the 'sudo admin account' instead of going for root directly

[INTPenis]

Heh yeah but we don't call it security by obscurity because those are dirty words, we call it "best practice" instead. ;)

[hansel_der]

true