3 ms·

> The setting will still occasionally reset after installing some system updates because it's 2023 and computers these days are extremely unreliable when it com

> The setting will still occasionally reset after installing some system updates because it's 2023 and computers these days are extremely unreliable when it comes to remembering user preferences. The sudo touchid mod gets reset so often now that I've stopped bothering with it. Ok, you win apple!

grishka 3y ago
I was just thinking that I should make a shell script with these commands and the touch ID one and add it as a login item. Sudo shouldn't be a big deal, just set the owner to root and set the SUID bit.
MBCook 3y ago
It may be official now! I just saw today that Sonoma contains an example pam config file with that line commented out. Uncomment, copy it over the default file, win. Far less hidden. https://mastodon.social/@StrangeNoises/110910261899874868 https://mastodon.social/@StrangeNoises/110910261899874868
- latchkey 3y ago
  YES! Confirmed! Thank you!
  - MBCook 3y ago
    Oh you posted that as a story. Heh. That’s a great idea. Why don’t I ever think of that? Glad I could help. It ran through my feed today by chance.
    - latchkey 3y ago
      My comments aren't entertaining enough to get enough upvotes for karma farming, so I post cool links that I find.
      - MBCook 3y ago
        Trust me, I get it. The cool links are what drew me to HN, however they’re found.
      - saagarjha 3y ago
        We appreciate your service :)
        latchkey 3y ago
        Thanks!
- JimDabell 3y ago
  I try this occasionally and always disable it again. For some reason I find the fingerprint sensor is far less reliable for this particular use case. When I try to authenticate, I have to try repeatedly to get it to recognise my fingerprint. I know it’s the same hardware and software doing the matching, so it doesn’t really make any sense to me.
  - MBCook 3y ago
    I don’t use it either. I don’t need sudo enough so I just don’t find the need. My password is strong but it’s not like it’s 58 characters. I love Touch ID in general on this Mac. This just didn’t do anything special for me, so I never really adopted it.
    - latchkey 3y ago
      I don't use sudo that much either, but it was always one of those things that was fun to adopt because it was theoretically a one time change. Set and forget. Once Apple started to update the OS more frequently, I stopped bothering trying to keep up with the resets. Thankfully this annoyance is fixed!
pxc 3y ago
Sadly, DisplayLink breaks that functionality (???). I've been unable to work around that breakage on my work Mac. :(
- cyann 3y ago
  This should help: defaults write com.apple.security.authorization ignoreArd -bool true
  - pxc 3y ago
    I did find that online, but unfortunately it did not help. :( I'm not sure if this is because that info is out of date, or due to some other issue specific to my work machine and what the org has installed/configured on it.

grishka 3y ago

I was just thinking that I should make a shell script with these commands and the touch ID one and add it as a login item. Sudo shouldn't be a big deal, just set the owner to root and set the SUID bit.

MBCook 3y ago

It may be official now! I just saw today that Sonoma contains an example pam config file with that line commented out. Uncomment, copy it over the default file, win. Far less hidden. https://mastodon.social/@StrangeNoises/110910261899874868 https://mastodon.social/@StrangeNoises/110910261899874868

latchkey 3y ago
YES! Confirmed! Thank you!
- MBCook 3y ago
  Oh you posted that as a story. Heh. That’s a great idea. Why don’t I ever think of that? Glad I could help. It ran through my feed today by chance.
  - latchkey 3y ago
    My comments aren't entertaining enough to get enough upvotes for karma farming, so I post cool links that I find.
    - MBCook 3y ago
      Trust me, I get it. The cool links are what drew me to HN, however they’re found.
    - saagarjha 3y ago
      We appreciate your service :)
      - latchkey 3y ago
        Thanks!
JimDabell 3y ago
I try this occasionally and always disable it again. For some reason I find the fingerprint sensor is far less reliable for this particular use case. When I try to authenticate, I have to try repeatedly to get it to recognise my fingerprint. I know it’s the same hardware and software doing the matching, so it doesn’t really make any sense to me.
- MBCook 3y ago
  I don’t use it either. I don’t need sudo enough so I just don’t find the need. My password is strong but it’s not like it’s 58 characters. I love Touch ID in general on this Mac. This just didn’t do anything special for me, so I never really adopted it.
  - latchkey 3y ago
    I don't use sudo that much either, but it was always one of those things that was fun to adopt because it was theoretically a one time change. Set and forget. Once Apple started to update the OS more frequently, I stopped bothering trying to keep up with the resets. Thankfully this annoyance is fixed!

pxc 3y ago

Sadly, DisplayLink breaks that functionality (???). I've been unable to work around that breakage on my work Mac. :(

cyann 3y ago
This should help: defaults write com.apple.security.authorization ignoreArd -bool true
- pxc 3y ago
  I did find that online, but unfortunately it did not help. :( I'm not sure if this is because that info is out of date, or due to some other issue specific to my work machine and what the org has installed/configured on it.