Hacker News new | ask | show | jobs
by kelseyfrog 59 days ago
For the same reason, I don't use sudo. Despite being patched, the presence of prior vulnerabilities [1] and hacks makes it fundamentally not trustworthy.

1. https://app.opencve.io/cve/?vendor=sudo_project

3 comments

What software are you willing to use then, considering your criteria would eliminate over 90% of OSS projects?
The difference is that sudo is useful. The EU age verification app however...
so do you just use su?
Just run everything as root to circumvent security problems.

Seriously, it is as if there would be a CVE because sudo allows privilege escalation.

Of course such widely spread tools should be audited and have eyes on them. On the other hand many people are tired of security strategies because half of the time it is about a platform doing it for market domination. Our thoroughly shitty mobile OS come to mind. This age verification crap isn't too different, just slightly different goals where real security isn't really considered too much.

No. Su also has a history[1] of vulnerabilities.

1. https://app.opencve.io/cve/CVE-2025-71263

Then what, do you just work on your root account?