Hacker News new | ask | show | jobs
by LinuxBender 1547 days ago
I would add to that, if yes does the company allow and test for passwordless sudo? Reason being that passwordless sudo + ssh multiplexing makes bypassing 2FA/MFA via phishing a breeze.

One can test this in scripts with

  sudo -n