Timeline for sudo without password: More of an issue on Apple?
Current License: CC BY-SA 3.0
12 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 24, 2015 at 9:26 | history | edited | bobstro | CC BY-SA 3.0 |
added 259 characters in body
|
| Jul 24, 2015 at 8:53 | history | edited | bobstro | CC BY-SA 3.0 |
added 592 characters in body
|
| Jul 23, 2015 at 22:46 | history | edited | bobstro | CC BY-SA 3.0 |
Reformatted numbered list, added mention of RPi listening with ssh by default
|
| Jul 23, 2015 at 20:45 | comment | added | goldilocks♦ | I agree w/ joan that it really isn't relevant, but since it involves a fear that some people may worry is, I haven't voted to close. I know that there is a lot of at least apparent inconsistency WRT on/off topic here and I feel bad about that, but I think it has to do with the fact that we can't afford to be 100% strict or completely lenient. Unfortunately that's bound to produce some bad feelings regularly :( -- just be glad this isn't the NTSB. | |
| Jul 23, 2015 at 20:40 | answer | added | goldilocks♦ | timeline score: 4 | |
| Jul 23, 2015 at 20:22 | vote | accept | bobstro | ||
| Jul 23, 2015 at 20:22 | |||||
| Jul 23, 2015 at 20:17 | answer | added | Greenonline | timeline score: 2 | |
| Jul 23, 2015 at 20:13 | comment | added | bobstro | Mea Culpa then, and thank you for not downvoting. I just find it incongruous that the resulting access is being played as a big deal on one platform, but "by design" on the other (the Microsoft defense for years). The fact that the RPi ships with a default password makes it a more critical issue, IMO. Particularly concerning how many posts here relate to connecting the RPi to the Internet, whether that was the original RPF intent or not. So "blame" belongs with RPF then? | |
| Jul 23, 2015 at 20:10 | comment | added | joan | As it happens on this occasion I didn't downvote. On the Mac it is a breach as the root permissions are gained by a non-root user. On the Pi it's not a breach as the root permissions are gained by somebody who is specifically permitted to have root permissions. Personally I don't like password free sudo access by default. I don't think that's Raspbian, but the Foundation's build of Raspbian. I do feel that the Foundation should make clear the importance of setting a new password as soon as possible. So I think to blame Raspbian would be wrong on both those issues. | |
| Jul 23, 2015 at 20:01 | comment | added | bobstro | It definitely is relevant to the RPi: The breach enables the same settings that are default on the RPi. Sudo works the same way on OS X. How can it be a bad thing on one platform, and perfectly normal on the one we happen to love? Thanks for simply downvoting and not deleting or otherwise mangling though. Would have preferred to discuss quietly on RPi forums, but... | |
| Jul 23, 2015 at 19:48 | comment | added | joan | I'm not convinced that a security breach which only affects a specific version of a non-Linux OS is relevant to the Raspberry Pi. | |
| Jul 23, 2015 at 19:28 | history | asked | bobstro | CC BY-SA 3.0 |