Sudo
Dev tools
command line utility
SHOW HN2017
How HN took it
3 positive, 9 neutral or asking, 0 mixed, 7 critical, out of 19 comments about the project. Thread score -0.23.
Idea: 3 for, 5 againstPrivacy: 0 for, 1 againstExecution: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Useful for avoiding reopening terminals as admin.
From 2 comments
This is actually very useful, will save me time reopening terminal sessions
kyriakos on HNChocolatey is one of my biggest reasons to use this. Every single time I install something I forget to run as admin.
flukus on HN
Remembers credentials so the password is not re-entered.
From 1 comment
The main point of sudo is that it eliminates the need to enter the password for a while. Does your "something identical in 10 lines" do that?
eps on HN
Objections
Built-in RunAs and Start-Process -Verb RunAs already cover this.
From 3 comments
I don't understand Windows permissions well but if anybody looking to do this without a dpendencey.. I think `Start-Process <stuff> -verb RunAs` does the same
TokenDiversity on HNNice as a learning project, but RunAs is already supported at CLI and GUI level, since several versions. For those without much Windows GUI-fu, shift-right click.
pjmlp on HN`Start-Process <stuff> -verb RunAs` in PS
TokenDiversity on HN
Security concerns about caching elevation across the system.
From 1 comment
Is it really sudo? Does it remember credentials somewhere for a limited time and across the whole system? If so, I cant see a way to implement it securely if you're not MS.
ComodoHacker on HN
UAC can be bypassed by user-space code, so it is not a full security boundary.
From 2 comments
I mean, you can easily bypass the UAC dialog by duplicating the token of a already elevated process. Here is an example of this I saw before in powershell:…
Andoryuuta on HNYes, If any malicious program is running in user land in windows, it can easily bypass UAC. But, as was mentioned when this was being discussed on reddit[0], UAC was never meant…
Andoryuuta on HN
Requests
Microsoft should let applications request elevation automatically.
From 2 comments
Yeah, I'd really like to see MS implement some method for applications to automatically request elevation when they try to do something that they otherwise wouldn't be allowed…
NTripleOne on HNI've always been annoyed by the lack of ability for certain things to elevate as needed. Why doesn't Notepad offer to let you elevate when you try and save the hosts file? I…
ocdtrekkie on HN
Document that credentials are remembered in the readme.
From 1 comment
You should probably clarify in the Readme that your sudo remembers the credentials or this thread will overflow with runas alternative suggestions.
eps on HN
Questions
Does it remember credentials and for how long?
From 2 comments
Is it really sudo? Does it remember credentials somewhere for a limited time and across the whole system? If so, I cant see a way to implement it securely if you're not MS.
ComodoHacker on HNThe main point of sudo is that it eliminates the need to enter the password for a while. Does your "something identical in 10 lines" do that?
eps on HN
Alternatives named
Chocolatey sudo package
From 1 comment
There's also a "sudo" for windows distributed as a chocolatey package that I've used for at least a year. Appears to do pretty much the same thing as this one.…
phs2501 on HN
elevate.exe
From 2 comments
I just use this 6 kb no-dependencies command line program: http://code.kliu.org/misc/elevate/
Grom_PE on HNBut it's extremely cumbersome from the CLI. RunAs always asks for password for the Administrator account (not the account for the delegated account like sudo). I have admin…
larschdk on HN
PowerShell Start-Process -Verb RunAs
From 2 comments
I don't understand Windows permissions well but if anybody looking to do this without a dpendencey.. I think `Start-Process <stuff> -verb RunAs` does the same
TokenDiversity on HN`Start-Process <stuff> -verb RunAs` in PS
TokenDiversity on HN
cygstart --action=runas
From 1 comment
I'm using ``` cygstart --action=runas ``` This works well, too.
elsamuko on HN
Scoop sudo
From 1 comment
There is also a sudo for scoop http://scoop.sh/
locusm on HN