Hacker News new | ask | show | jobs
by cassianoleal 766 days ago
Wouldn't those attacks all require the user to have set up passwordless sudo?
1 comments

You can change sudo into an alias that steals your sudo password and then does whatever else.

Not that it makes a huge difference in practice, IMO. The apps most users run (i.e. distro apps) are plenty trusty for normal threat models. Apps that run real untrusted code (web browser) have their own sandboxes. And people with more serious threat models can run qubes or tails or whatever

Qubes is great.