[{"data":1,"prerenderedAt":510},["ShallowReactive",2],{"project-12834327":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":29,"sentiment":30,"stance_mix":31,"scored_comments":36,"aspects":37,"strip":45,"post_text":48,"what":49,"said":70,"maker_in_thread":176,"shape":178,"grid":183,"attempts":472,"same_week":473,"maker_shows":39,"maker_hidden":502,"reader_version":503,"card":504},"12834327","sudo-touchid","A fork of sudo with Touch ID support","title","Show HN: A fork of sudo with Touch ID support","https:\u002F\u002Fgithub.com\u002Fmattrajca\u002Fsudo-touchid","github.com","mattr1",1477888398,2016,347,128,45,2264,2,"legend","security_privacy","authentication tooling","cli",[24,25,26,27,28],"sudo","touch id","macos","authentication","fingerprint","curious",-0.164,{"positive":32,"neutral":33,"mixed":34,"critical":35},6,25,0,17,48,{"design":38,"idea":40,"execution":42,"privacy":43,"performance":44},{"positive":39,"critical":18},1,{"positive":41,"critical":32},4,{"positive":34,"critical":39},{"positive":34,"critical":32},{"positive":39,"critical":39},[46,39,39,39,34,34,34,34,34,34,34,34,34,34,39,41,47,46,46,46,39,34,39,34,39,47,34,39,39,39,18,41,46,46,18,39,39,34,34,46],3,5,null,{"problem":50,"audience":48,"pricing":48,"motivation":48,"time_to_build":48,"stack":60,"openness":68,"stage":69,"team_size":69},{"value":51,"source":52,"evidence":53},"Entering a password for sudo on macOS is tedious; Touch ID offers a faster prompt.","inferred",[54,56],{"id":55},"post",{"id":57,"by":58,"text":59},"12834509","stephenr","This sounds amazing, and Id love if Apple allowed touchid for regular account-password prompts in macOS 10.13 (or a Sierra point update but let's be realistic) If they integrated…",[61],{"value":62,"source":52,"evidence":63},"Objective-C or Swift via macOS LocalAuthentication framework",[64],{"id":65,"by":66,"text":67},"12834599","pritambaral","Similar: On Linux, doing something like this doesn't require patched sudo. sudo uses the OS provided auth framework (PAM), which is pluggable (the 'P' in 'PAM' stands for…","open_source","unknown",{"praise":71,"objections":93,"requests":138,"questions":147,"alternatives":163},[72,85],{"value":73,"source":74,"evidence":75},"Sounds useful and a practical use of the Touch Bar and Touch ID","commenter",[76,77,81],{"id":57,"by":58,"text":59},{"id":78,"by":79,"text":80},"12836342","oniyokai","Nice! Cool application of the touch bar. Much more practical than some of Apple's so far demoed examples. ;)",{"id":82,"by":83,"text":84},"12834943","GiovanniFrigo","I love this. Should buy a new MacBook just to be able to use this :D",{"value":86,"source":74,"evidence":87},"Similar Touch ID or biometric auth exists on Windows Hello and Linux fprintd",[88,92],{"id":89,"by":90,"text":91},"12838641","bhauer","The Surface line-up provides a similar feature for User Access Control (UAC) prompts via Windows Hello facial recognition (or the available fingerprint scanner for older…",{"id":65,"by":66,"text":67},[94,109,124,131],{"value":95,"source":74,"evidence":96},"Fingerprints can be lifted or spoofed and are weak authentication",[97,101,105],{"id":98,"by":99,"text":100},"12837844","partycoder","Be mindful that it is not hard to lift fingerprints to trick that authentication method. Most specially, in an office environment it can be done from a mouse, a keyboard, a glass…",{"id":102,"by":103,"text":104},"12835154","zwp","https:\u002F\u002Fwww.schneier.com\u002Fcrypto-gram\u002Farchives\u002F2002\u002F0515.html#5 \"He used $10 of ingredients you could buy, and whipped up his gummy fingers in the equivalent of a home kitchen.…",{"id":106,"by":107,"text":108},"12837457","mkhalil","\"could be as simple as taking a photo\" I don't buy this story or their \"sources\" at all. A zoomed in photo is enough to create a accurate 3d model? Really? I might be naive at…",{"value":110,"source":74,"evidence":111},"Fingerprints are identifiers, not secrets, so they should not authenticate",[112,116,120],{"id":113,"by":114,"text":115},"12834601","rrmm","Shouldn't touch ID be the userid and not the password?",{"id":117,"by":118,"text":119},"12839032","jwatte","Fingerprints are user names, not passwords.",{"id":121,"by":122,"text":123},"12837098","dragonshed","I think the gp was alluding to an argument originally from this blog post [1], which posits that biometrics should only be used to identify, and should never be used to…",{"value":125,"source":74,"evidence":126},"DYLD injection could bypass the LocalAuthentication check",[127],{"id":128,"by":129,"text":130},"12837805","sjtgraham","I have a feeling this is EXTREMELY DANGEROUS to have on your Mac. Using DYLD_INSERT_LIBRARIES and attacker could inject code that swizzles -[LAContext evaluatePolicy:…",{"value":132,"source":74,"evidence":133},"Not useful for most users since most commands do not need sudo",[134],{"id":135,"by":136,"text":137},"12834729","elmigranto","I don't think this is very useful, at least in my usecase, where most things don't require sudo in the first place (homebrew installed DBs, etc.). Would be awesome to TouchID…",[139,143],{"value":140,"source":74,"evidence":141},"Touch ID support for system password prompts and su",[142],{"id":57,"by":58,"text":59},{"value":144,"source":74,"evidence":145},"Touch ID for remote sudo or other OS prompts",[146],{"id":135,"by":136,"text":137},[148,156],{"value":149,"source":74,"evidence":150},"Why not use the macOS authorization framework or PAM instead",[151,152],{"id":65,"by":66,"text":67},{"id":153,"by":154,"text":155},"12836471","bonyt","I don't have one of the new macbooks, but wouldn't making a wrapper around the macOS authorization services thing do this as well? Something like: osascript -e \"do shell script…",{"value":157,"source":74,"evidence":158},"Why does sudo exist instead of running as root",[159],{"id":160,"by":161,"text":162},"12834711","TekMol","I never understood the obsession with sudo. Why not just be root in the first place?",[164,168,172],{"value":165,"source":74,"evidence":166},"Linux PAM with fprintd",[167],{"id":65,"by":66,"text":67},{"value":169,"source":74,"evidence":170},"Windows Hello for UAC prompts",[171],{"id":89,"by":90,"text":91},{"value":173,"source":74,"evidence":174},"osascript with administrator privileges",[175],{"id":153,"by":154,"text":155},{"comments":34,"answered":34,"key":177},[],{"commenters":179,"max_depth":180,"maker_replies":34,"first_comment_mins":181,"lifespan_hours":182},70,9,63,24,[184,186,189,192,195,199,202,205,209,213,217,220,223,226,229,232,235,237,240,243,245,247,250,252,254,256,259,261,263,266,268,270,272,274,276,279,281,283,286,288,292,294,297,299,303,306,309,311,313,316,317,319,321,324,326,329,331,334,337,339,342,345,347,349,353,356,358,361,363,366,369,372,375,378,379,382,383,387,389,392,396,399,400,403,405,408,410,412,414,418,420,422,425,427,429,434,436,438,441,444,446,449,451,454,457,460,462,464,467,470],[65,34,46,185,66,34],"project\u002Fneutral\u002Fdesign",[187,34,46,185,188,34],"12834638","brazzledazzle",[190,34,39,191,66,34],"12834661","project\u002Fcritical\u002Fdesign",[193,34,46,185,194,34],"12835057","lm2s",[196,34,34,197,198,34],"12836494","commenter\u002Fneutral\u002Fnone","reledi",[200,34,46,185,201,34],"12835128","seanp2k2",[203,34,39,191,204,34],"12835516","dancek",[206,34,39,207,208,34],"12837677","project\u002Fcritical\u002Fidea","tomphoolery",[210,34,39,211,212,34],"12839716","project\u002Fcritical\u002Fexecution","altendo",[214,39,34,215,216,34],"12836914","other\u002Fneutral\u002Fnone","matt4077",[218,39,34,215,219,34],"12837179","intruder",[221,39,34,215,222,34],"12837335","monkmartinez",[224,39,34,215,225,34],"12838985","acdha",[227,39,34,228,222,34],"12840363","other\u002Fcritical\u002Fnone",[230,39,34,215,231,34],"12837504","duaneb",[233,39,34,215,234,34],"12838524","striking",[236,39,34,215,231,34],"12839282",[238,39,34,215,239,34],"12839390","tkxxx7",[241,39,34,228,242,34],"12840391","tomtheelder",[244,39,34,215,239,34],"12840516",[246,39,34,215,222,34],"12840507",[248,39,34,215,249,34],"12838185","jlarocco",[251,39,34,215,58,34],"12838257",[253,39,34,215,249,34],"12838412",[255,39,34,215,58,34],"12838574",[257,39,34,215,258,34],"12838620","robinson7d",[260,39,34,215,58,34],"12838739",[262,39,34,215,258,34],"12838933",[264,39,34,215,265,34],"12839416","Nullabillity",[267,39,34,215,222,34],"12840402",[269,39,34,215,258,34],"12840598",[271,39,34,215,58,34],"12843285",[273,39,34,215,242,34],"12840441",[275,39,34,215,58,34],"12843325",[277,39,34,215,278,34],"12843455","douche",[280,39,34,215,234,34],"12838599",[282,39,34,215,242,34],"12840466",[284,39,34,215,285,34],"12839754","emidln",[128,18,39,287,129,34],"project\u002Fcritical\u002Fprivacy",[289,18,46,290,291,34],"12838284","project\u002Fneutral\u002Fprivacy","pasyormie",[293,18,34,197,129,34],"12838420",[295,18,46,290,296,34],"12839330","conradev",[57,46,47,298,58,34],"project\u002Fpositive\u002Fidea",[300,46,46,301,302,34],"12834621","project\u002Fneutral\u002Fidea","lucaspiller",[304,46,47,298,305,34],"12834702","eddieplan9",[307,46,34,215,308,34],"12835053","tajen",[310,46,46,301,58,34],"12835745",[312,46,46,185,204,34],"12835523",[314,46,34,197,315,34],"12838542","ghostly_s",[113,41,46,301,114,34],[318,41,34,197,66,34],"12834622",[320,41,46,301,114,34],"12834671",[322,41,46,301,323,34],"12834724","arnarbi",[325,41,46,301,114,34],"12834751",[327,41,46,301,328,34],"12835751","Klathmon",[330,41,46,301,323,34],"12838172",[332,41,39,287,333,34],"12835045","yxhuvud",[335,41,34,197,336,34],"12835143","CodeWriter23",[338,41,34,197,66,34],"12835219",[340,41,34,197,341,34],"12835367","throwanem",[343,41,34,197,344,34],"12836044","noja",[346,41,34,197,336,34],"12840175",[102,41,39,348,103,34],"project\u002Fcritical\u002Fperformance",[350,41,34,351,352,34],"12835170","commenter\u002Fneutral\u002Fperformance","dogma1138",[354,41,34,351,355,34],"12836682","vog",[357,41,34,197,323,34],"12838193",[359,41,34,197,360,34],"12837045","a_c_s",[362,41,39,287,114,34],"12837332",[364,41,46,301,365,34],"12837403","zimpenfish",[367,41,34,368,323,34],"12838254","other\u002Fneutral\u002Fprivacy",[370,41,47,371,352,34],"12835146","project\u002Fpositive\u002Fperformance",[373,41,34,215,374,34],"12835473","PetahNZ",[376,41,34,368,377,34],"12836318","d0mine",[106,41,34,215,107,34],[380,41,34,215,381,34],"12837582","lorenzhs",[121,41,39,207,122,34],[384,41,34,385,386,34],"12834695","commenter\u002Fneutral\u002Fidea","eshyong",[388,41,39,287,114,34],"12834720",[390,41,34,215,391,34],"12834872","dvhh",[393,41,34,394,395,34],"12835377","other\u002Fneutral\u002Fperformance","bhaak",[397,41,39,287,398,34],"12835112","cheiVia0",[153,47,46,301,154,34],[401,32,46,301,402,34],"12834678","algesten",[135,404,39,207,136,34],7,[406,404,46,301,407,34],"12834874","icebraining",[409,404,46,301,216,34],"12836899",[411,404,46,301,136,34],"12843483",[89,413,47,298,90,34],8,[415,180,46,416,417,34],"12834712","project\u002Fneutral\u002Fnone","mrkgnao",[419,180,34,197,216,34],"12836857",[98,421,39,287,99,34],10,[78,423,47,424,79,34],11,"project\u002Fpositive\u002Fdesign",[426,423,34,197,216,34],"12836852",[82,428,47,298,83,34],12,[430,431,39,432,433,34],"12838815",13,"project\u002Fcritical\u002Fnone","dukerutledge",[117,435,39,207,118,34],14,[160,437,39,207,161,34],15,[439,437,46,301,440,34],"12834713","aplummer",[442,437,34,215,443,34],"12834861","minitech",[445,437,39,207,136,34],"12834715",[447,437,46,301,448,34],"12834718","woodruffw",[450,437,34,215,161,34],"12834741",[452,437,34,197,453,34],"12834765","phyalow",[455,437,34,215,456,34],"12834769","besselheim",[458,437,34,215,459,34],"12834794","ajdlinux",[461,437,34,215,374,34],"12835488",[463,437,34,215,448,34],"12834845",[465,437,34,215,466,34],"12836378","ascagnel_",[468,437,34,215,469,34],"12835841","tskaiser",[471,437,46,301,99,34],"12837875",[],[474,479,484,489,493,498],{"id":475,"name":476,"points":477,"category":478},"12843466","My first web app",297,"web_saas",{"id":480,"name":481,"points":482,"category":483},"12803860","Zone Messenger",194,"consumer_social",{"id":485,"name":486,"points":487,"category":488},"12838152","Fast Style Transfer",184,"ai",{"id":490,"name":491,"points":492,"category":20},"12802785","Android 'root' phones via dirtyc0w exploit",143,{"id":494,"name":495,"points":496,"category":497},"12842797","KQ",116,"dev_tools",{"id":499,"name":500,"points":501,"category":478},"12848656","Academic Bio",113,false,"v2",{"id":505,"name":5,"line":6,"ai":502,"cat":20,"year":13,"points":14,"comments":15,"rec":29,"s":506,"top":18,"kw":507,"maker":11,"domain":10,"tier":19,"attempts":34,"strip":508,"url":9,"mix":509,"praise":73,"objection":95,"sub":21},12834327,-0.16,[24,25,26,27,28],"3111000000000014533310101501112433211003",[32,33,34,35],1794036549029]