> I do not really have words for this. The Rust sudo has apparently opted to keep the single most dangerous wildcard while disallowing all of the wildcards that allow one to be narrow and specific about what you're allowing, and it buries this at the end of a section that devotes a bunch of words to describing functionality it doesn't have and doesn't support, with absolutely nothing else in that section to say this (either up front or in the descriptions of how all the wildcards would work if sudo-rs supported them, which it doesn't).
> Also, this is documentation calculated to mislead busy system administrators who are skimming it to see if there is some big difference between the Rust sudo that Canonical has stuck them with and the real version of sudo.
True, but that prevalence is not a constant. In fact, across the broader landscape of human history, that appears to be a relatively recent development, and almost certainly environmental/toxins related. For example: https://www.newscientist.com/article/2479344-dementia-cases-...
Until last year (when he was 95), he was operating the world's largest holding company by assets and revenue.
It was also the first non-tech company to reach $1T market cap.
And, its class A stock was by far the most expensive stock in the world at $740,000 per share, more than 100x more expensive than any other US stock.
So, yeah, I think he'd be qualified to operate maybe even two McDonalds. Maybe he could even be driven to them.(Coincidentally, he is a HUGE McDonalds and Coke fan and has eaten there almost every morning for over 50 years.)
Disrespecting older people seems to be a hobby as old as Father Time.
> Starting Oct. 16, exporters must register with the authorities if they plan to transfer intellectual property to overseas entities, grant licenses to foreign companies to use Chinese technology, or transfer ownership of Chinese technology to any foreign party, according to the ministry.
@dang for some reason, the original link was instantly [dead]. Is epochtimes a banned site?
The Epoch Times has been banned since 2012: https://news.ycombinator.com/from?site=theepochtimes.com&kin... Probably just because 'jjp9999 was posting them too much, but considering that at the time they were breathlessly reporting on an impending coup in Beijing and that SARS had returned, it was probably for the best. When the Epoch Times is reporting something that's actually true, you can usually find a more reliable source. E.g. Reuters in this case: https://www.reuters.com/world/asia-pacific/china-proposes-ad...
Well, they might use zero Google accounts. There is no real difference between one or multiple accounts, security-wise, unless you are very diligent about using different VPNs and such.
This is wildly over-complicated and also has a bunch of footguns and security risks.
For example, that very first NGINX section allows an attacker to direct their incoming traffic to any arbitrary listening port on localhost. They can even write a simple for loop in bash that would use curl to test all of the different ports. This also bypasses any firewall rules that you might have blocking traffic from the outside world.
be very careful following the instructions in this article.
It's already using a high port. Forwarding a high port directly with SSH prevent exposing the service through a virtual host and provide HTTPS (but I didn't think of it until your mentioned it). And it would open the service to be discovered by enumerating all possible ports, like you mentioned in your first comment.
sish and ngrok are mentioned in the intro along with the reasons I didn't go this way (specific SSH server to run for the first and not self-hosted for the later).
This domain is crowded with solutions. I only explored that myself because the "free" solutions only requiring an SSH client were unreliable, including the free tier of ngrok (broken SSH tunnel).
> Also, this is documentation calculated to mislead busy system administrators who are skimming it to see if there is some big difference between the Rust sudo that Canonical has stuck them with and the real version of sudo.
just.. wow.
reply