3 ms·

And it can run sudo as your user after you warm it up. Or use any number of frequently disclosed OS vulnerabilities for local privilege escalation.

• Wowfunhappy 6y ago
  > And it can run sudo as your user after you warm it up. How is it getting my root password?
  • edgyquant 6y ago
    I set sudo to NOPASSWD, so it doesn’t need one for my workstation
  • thelopa 6y ago
    Sudo persists authorization for a short period of time so that you don’t need to re-authorize for back-to-back commands. Also, once they get ACE they can modify your bashrc to make sudo an alias for “sudo rm -rf / ;” or all sorts of other evil trickery.
  • VMG 6y ago
    it could also alias sudo to some other command
    • JetSpiegel 6y ago
      Like "doas".