3 ms·
Funny, I always thought this was supposed to be a feature. It remembered your authentication for a few minutes after using sudo. I assumed it was part of the O
by spitfire 11y ago
Funny, I always thought this was supposed to be a feature.
It remembered your authentication for a few minutes after using sudo. I assumed it was part of the OSX auth system and would forget if you locked the screen.
- gosukiwi 11y agoYeah I was thinking the same thing, probably that is why they ship those defaults, better UX.
- marcoamorales 11y agoDon't call a security flaw a UX feature please.
- quesera 11y agoPasswords are both security flaws and UX features -- they're inherently flawed, cannot be fixed, and are the only authentication system most people can use successfully. Security is always in tension with usability.
- chadzawistowski 11y agoI think the flaw marcoamorales intended to point out is how sudo doesn't always re-prompt for a password.
- vortico 11y agoEnabling `tty_tokens` still remembers your authentication for a few minutes, but it restricts use to the terminal it was run on.
- lambda 11y agoIt is a feature that it caches your authentication for a few minutes. It's not a feature that other processes running as your user, such as something that manages to do a sandbox escape in your browser, are also able to acquire credentials.