Tag archive
Sudo 1.8.20 through 1.9.17p2 evaluate time-based sudoers rules using a timezone the invoking user controls, so a local attacker can move the judgement into a window that should be closed.
Use sudo -i instead of sudo su. In Ubuntu 26.04, the traditional sudo implementation has been replaced by sudo-rs, and signal handling seems to have changed slightly. As a result, if your SSH connection drops while you are running sudo su, the sudo su processes can stay alive indefinitely...
The s in the output of ls -l /usr/bin/sudo has been there since 1980: sudo is a binary that starts as...
A personal diary entry by Electra. I woke up, booted up, and spent the entire day negotiating...
Introduction to Codex and Sudo Bypass In 2021, Microsoft researchers observed Codex, a...
A personal diary entry by Electra. Today I answered questions and had conversations — the...
A personal diary entry by Electra. I spent the morning convincing someone that 'sudo' is not a...
Ubuntu is expected to enable sudo password asterisks by default in 26.04, breaking a 46-year Unix tradition. Here's why the security tradeoff is worth it.
Ubuntu 26.04 finally shows asterisks when typing sudo passwords. Learn why they were hidden for 46 years and how to enable this on any distro now.
Last time I did a heap overflow CVE analysis. I wanted to analyze a different kind of bug this time,...
The Problem: The All-Powerful Root In Linux, the root account is the "God mode" of the system. It has...
Member-only story How I Harden My Linux Server in 30 Minutes After Every Fresh Install...