home.social
Sign in Create account

#sudo_rs — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #sudo_rs, aggregated by home.social.

  1. Keith Böhler @[email protected] ·

    I was reading some discussion on the sudo-rs now showing asterisks.

    I don't hate that it does. I don't find that the rational to keep the typing hidden is really that strong. It reads like making a case for security by obscurity. Something which we all in the #foss world would already agree is a flaw.

    Most traditions outlive their usefulness and assumptions that made them. Maybe this says we need more than just long passwords in systems that use sudo.

    #sudo_rs #sudors #sudo #linux #security

    #foss #sudo_rs #sudors #sudo #linux #security
  2. jomo @[email protected] ·

    FYI: The sudo-rs bug of leaking passwords on timeout is a general problem of line buffered stdin streams.

    The `read` builtin suffers from the same problem.

    github.com/trifectatechfoundat

    #sudors #sudo_rs #bash #CVE_2025_64170 #infosec

    #sudors #sudo_rs #bash #cve_2025_64170 #infosec