3 ms·

Wouldn't those attacks all require the user to have set up passwordless sudo?

• verall 2y ago
  You can change sudo into an alias that steals your sudo password and then does whatever else. Not that it makes a huge difference in practice, IMO. The apps most users run (i.e. distro apps) are plenty trusty for normal threat models. Apps that run real untrusted code (web browser) have their own sandboxes. And people with more serious threat models can run qubes or tails or whatever
  • NewJazz 2y ago
    Qubes is great.