3 ms·

> I enjoyed this part Very nice indeed. Such a simple mitigation and it makes evil people sad, which makes me happy.

• dist-epoch 3y ago
  This is for local sudo privilege escalation. If the attacker is already running code on your system, you kind of lost anyway.
  • nuccy 3y ago
    Not really. An example out of top of my head, where this still might be useful are login nodes (used in many research clusters to allow users to enter and sumbit jobs) or shared web-hosting servers (few of those definitely still exist). There legitimate non-privileged users can run their programs and the end goal is to prevent them from getting root.
    • charcircuit 3y ago
      Another common one is for example minecraft / source engine game server hosts as they commonly allow customers to install mods.
    • wongarsu 3y ago
      The last time I looked at the statistics the majority of the internet was still running on PHP, mostly wordpress installs. I'm willing to bet those are mostly on shared hosting with accounts separated by nothing but their linux user.
      • rurban 3y ago
        Last time I looked, 70% of the internet runs on cPanel, which uses my perl compiler.
  • _3u10 3y ago
    Most of the cloud works this way unless you are using bare metal / largest size instances.