On Wednesday, March 15, 2017 at 3:15:15 PM UTC-4, cooloutac wrote:
> On Tuesday, March 14, 2017 at 7:22:04 PM UTC-4, Chris Laprise wrote:
> > On 03/14/2017 12:57 PM, cooloutac wrote:
> > 
> > > yes I agree having to click yes in a dom0 popup will not be cumbersome 
> > > for most. But is it that easy for the devs to implement?
> > 
> > Its already there, for a long time now. The vm-sudo doc describes how to 
> > enable it.
> > 
> > -- 
> > 
> > Chris Laprise, [email protected]
> > https://twitter.com/ttaskett
> 
> thanks!

 I think this thread is now sudo vs doing everything in dispvms? lol well 
regarding sudo you guys heard about the malware fsybis last year?  installs on 
linux system without root by clicking bad link.  persists, keylogs, phones 
home, spreads. root not required.  and I mean what data you got in root 
directories thats more private then user data?  

I guess the argument is that you are protecting dom0 by using sudo in an appvm? 
Sorry if I;m stating the obvious.

But doing everything in a dispvm?  Sure, if someone else sets it up and 
maintains it for me lol. I'm not gonna bother with the scripts, I use Qubes so 
I don;t have to read emails in text only mode and implement crazy security 
measures like selinux or apparmor with grsec, which also have never helped me 
much before. I gave all that stuff up.

All it takes is one bad click and something I say yes to.  It happens to 
everyone eventually.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/df29a1f1-8f8e-497a-8389-95e8d6ab3e9f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to