Re: ✘"Sudo? Sudon't!" and "Saving U-blox Configuration"

[Gary E. Miller]

Yo Bernd!

On Sun, 17 Jan 2021 20:45:59 +0100
Bernd Zeimetz <bernd@bzed.de> wrote:

> On 1/16/21 9:16 PM, Gary E. Miller wrote:
> > The tick is, I can hack you with sudo without putting anything in
> > your path.  
> 
> Oh nice, I can do that with su, too.

So you retract your original point>

> >> Saying that su is more secure than sudo is just silly.  
> > 
> > Not requiring passwords for root is silly.  Letting any old phishing
> > app hook you.  
> 
> Thats why sudo requires a password (unless you remove that
> requirement).

Uh, no.  RTFM.  By default sudo only requires a password every five minutes.
In five minutes I can drive a train theough the hole.

And when sudo does require a password, it requires the same stolen password
that prolly got the hax0r to you prompt.  Most people still use, and
mis use password, and they get stolen all the time.

Can you honstely say that none of your passwords has never shown up
on a public list?  You would be the one in one thousand.

> >> For me the question is: why does it fail at all. Looking trough the
> >> code I didn't find a reason why it should fail.  
> > 
> > As I expected, you don't understand how sudo works then.
> > 
> > Trying the examples, with sudo, will teach you something.  
> 
> I don't have a ubx chip here right now, but it fails with a sane error
> message, no troubles at all. Strace doesn't show anything bad.

No, it fails.  You will never see the issue with strace.

> Please show what exactly fails for you with sudo and i'll try to fix
> it when I found an usb cable and the ubx thing I have somewhere.

I'll not aid stupidity.  Sudon't.

RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
        gem@rellim.com  Tel:+1 541 382 8588

            Veritas liberabit vos. -- Quid est veritas?
    "If you can't measure it, you can't improve it." - Lord Kelvin

pgpwTZ9Ggo0sA.pgp
Description: OpenPGP digital signature