
For the LULZ
Pretty sure
sudo rm -rf/*
would just yield an error message.
Sadly
sudo rm -rofl /
is also a no-no, but would be very nice to have.
The denizens of internet horror-forum 4chan have come up with a hoax designed to trick Mac fans into deleting all the files on their machines by running commands supposedly needed to turn on hidden Bitcoin mining features. Apple's so-called secret mining feature, which 4channers claim has been present in Macs since 2009, can …
4chan really are a bunch of moron since always.
There, fixed that for you. If you ask me, anyone stupid enough to follow tech advise from there on there nice shiny iThing computers get what they deserve for the following.
1: paying too much for a BSD based x86_64 computer that's unjustly hard to fix.
2: being stupid enough to do anything 4chan says to do on it.
Fancy speccing me a machine that exactly matches the apple macbook pro, for the same price, with the same spec (including metal body, high res screen, quality components, and warranty that includes taking your laptop straight into a shop where they will fix or replace instantly for the next year). Am I genuinely in the market for a spec similar to the macbook pro and if you can get it half price for me its a deal
'"With many people intrigued by mainstream newspaper stories about Bitcoins, but lacking in knowledge about how to dip their toe into the waters of Bitcoin mining, there is a danger that some folks could take the advice seriously,' Cluley writes in a blog post featuring screenshots of the deliberately misleading flier."
So here we have Cluley attempting to help the Clueless.
Makes sense to me.
"This is why the 'sudo' command is disabled on all my *IX systems."
"That seems a bit OTT, have you disabled 'su' and 'rm' as well ? ;)"
I remember seeing a strong recommendation in an "idiot's guide to DOS" book: Never ever, ever use "format". Explaining it does something you should never ever, ever have to do.
Sure. "idiot's" guide indeed.
Any command which escalates the user to admin rights has its dangers in the hands of an inexperienced user (or an idiot). However, if you disable sudo you have to enable root login which has different and, in the opinion of most linux users, significantly more dangerous implications.
Disbling sudo might "work for you" but if you are going to advocate it you should at least add a rider to explain that the alternative may be worse.
The advantages and uses of sudo are explained here (and in many other places).
https://help.ubuntu.com/community/RootSudo
Well, none of my server systems run Ubuntu for starters. They are all RHEL/CentOS.
'su' to root is also disabled. On the odd ocassions that I need root access once the system is up and running I will login as root directly. No remote login to root is allowed either. You have to be physically at the systems to do anything as root.
All done through Selinux etc
Oh, and the normal runlevel is 3.
That good enough reason for you?
That's the Ubuntu approach. Like many other aspects of Linux, they're going their own way there.
Personally, I wouldn't find it acceptable that the default user has default root access to everything (on submission of the regular login password).
You'll note that the first reason they give for doing it their way is that "The Ubuntu installer has fewer questions to ask." Oh, well that's all right then.
I agree, and would point interested readers to an article that was in Linux journal some years back about "how to make you machine not need root". That sort of security granularity is very nice for "common" users.
As an aside, am I the only one who has had sysadmins very nicely use "alias rm 'rm -i'" to make sure newbies did not nuke their home directories?
Of course with the "hourly.0" snapshot, who cares...;-)
P.
during 2009, grossed me 0.04 of a bitcoin over about a month. Although this might be billions in the future, I just let the account I was using lapse and therefore I am a cautionary tale to the young about prospecting and generally being bothered. However at the time, it was just like being a Jack London character, except with central heating and less dogs. (but not really).
You don't need to know unix commandline. You just need a basic understanding of human nature and a tiny bit of common sense. From that it's easy to derive that:
A.) Apple would not have made a bitcoin mining utility which allowed users to take ownership of any bitcoins mined,and
B.) YOU SHOULD NEVER TRUST ANYTHING ON 4CHAN.
back in the 80s, people used to advise that "FORMAT C:\" was the magic command, and many "lulz" ensued.
Of course everyone got wise to that.
And then people started circulating "hacks" to speed your machine up. They were suitably impressive. You had to run DEBUG, and then issue an "OUT" command. Which proceeded to call your hard card (remember them ?) low-level format routine ...
Am I alone in having no sympathy for someone who blindly follows something from the internet ? It's almost Darwinian .....
has been happening forever. Who doesn't snigger when the BOFH tells a luser to wrap their floppy disks (remember those?) in magnets to protect against solar flares? Or tricking people into giving up passwords like this? Sure, these are nasty tricks and it's the worst possible way to learn a valuable lesson (though, as they say, good judgement only comes from experience and the best experience comes from bad judgement), but there are certain lessons (not replying to spam, not forwarding chain mail, disbelieving anything that sounds too good to be true and not basically not trusting anything on the Internet until you've verified it with another source among them) that everyone needs to learn.
So yeah, sorry for the poor mugs that fall for it, but basically "meh".
We laugh at thing like The BOFH because it's a story and we think "I'd sort of like to do that" but you that you can't because of basic decency. BOFH is not a real person or group of real people going all out to try to make another person's day as bad as they can, for a laugh, which is as pitiful as it is despicable.
"...real people going all out to try to make another person's day as bad as they can, for a laugh, which is as pitiful as it is despicable."
I downvoted your comment because it illustrates perfectly the all-too-common mentality these days of refusing to take personal responsibility for one's decisions and actions. It is this mentality that has been the primary cause of the erosion of our liberties, more so even than the terrorist and paedophile canards; blaming others for our own bad decisions and seeking reparations from them for our mistakes is why "freedom of speech" has become a farce.
If I told you that Toyota have been secretly including anti-gravity devices in all their cars manufactured since 2011 which can be activated simply by driving the car from altitude, and you go and drive your brand-new Prius off a cliff because you believed me, who's fault is that? I'm not the one who was driving the car. You were, ergo you and you alone are to blame. You made the decision to follow a stranger's advice without doing any research or checking up the facts for yourself before acting.
Pranking people who don't stop to think for themselves is as old as laughter itself. It's the same sense of humour that causes Australians to warn tourists to put forks in their hats and toothpaste on their ears to ward off drop bears. It's the same sense of humour that has a barrack-room sergeant sending a new recruit to engineering to fetch a "long weight." It's a basic aspect of human nature to prank each other, and has been for millennia - until now.
Branding people as "pitiful and despicable" for merely having a prankish or twisted sense of humour is really what is pitiful and despicable here.
But if people actually disbelieve anything that sounds too good to be true and didn't buy said items, think of the sudden unemployment increase as many 'outlet villages', 'upto 90% off' brand label stores, broadband companies, mobile companies* and marketing companies found themselves out of business.
And what would all those poor people wanting to give me millions if I help transfer funds out of their country or collect the lottery winnings from a country I've never been to do?
*1Gb of data for £10 a month is not a shed load. Unlimited for £12 a month could be called a shed load... and I very big shed a that.
"*1Gb of data for £10 a month is not a shed load. Unlimited for £12 a month could be called a shed load... and I very big shed a that."
If your ISP is anything like mine tho, 12 quid a month for unlimited could mean "1Gb at full speed, after which your connection will be throttled to 64kbps until the next billing date, of which will cause most modern websites and services to timeout on you".
Yup, you only have to look at how many people willingly hand over their life savings to help Nigerian Oil heirs. I'm going out on a limb here but it is a combination of greed and stupidity rather than wanting to help that nice ambassadors son get his inheritance that gets them on the front page of the newspaper.
https://www.google.com/search?q=nigerian+email+scam+life+savings&client=ms-opera-mobile&channel=new#channel=new&q=nigerian+email+scam+life+savings&spell=1
Sadly yes, people have even stolen money to send. Hard to believe but greed is powerful and some folks are both weak and stupid.
And if you believe anything that's posted on a community help site then your a moron.
If I had a penny for every time somebody has suggested on a random community site some poor idiot gets told to reformat a computer or reinstall windows instead of doing something sensible, then while I might not be a millionaire I certainly would be able to afford to eat well off of that money for a few days!
A personal favourite of mine is the advice to stick your computer in a DMZ so you don't have to configure a firewall which can be found on pretty much any gaming site.
Unfortunately the truth is that the vast majority of mac computers have only one account, and that is the account the user created upon first turning the machine on. This is always an admin account and therefore always part of the sudoers list.
I actually think that I'm the only mac user that has a managed account for day to day computing and an admin account for well, you know, admin thingies.
One particular 4chan thread made me laugh. Someone was trolling about how he could hack anyone's computer. One anon gave him his IP address: 127.214.56.12. The troll told the thread how he was able to see "this guy's" files -- not realizing they were his own! He was so happy to be able to delete the \windows\system32 folder on the "remote" system. We didn't see any more posts from him...
OK, he gets into this system (his own) and the first thing he does is delete system files? That is pretty funny, he really did get what was coming to him 8-)
(N.B. for anyone who is wondering, although 127.0.0.1 is standard localhost address, 127.x.x.x all actuallly connect to localhost.)
And there I was thinking that my Mac was like a Fisher Price toy that couldn't be damaged....
Unless they come with a manual that talks about the *nix teminal window and says "ON NO ACCOUNT USE THIS UNLESS YOU REALLY KNOW WHAT YOU'RE DOING" then although I despise this unfunny attempt to make non techie people's lives worse because of their supposed inferiority because, hey, they don't understand the unix command line, then Apple should admit that they make massively customizable personal computers that you can screw up royally if you do things you don't understand, just like all the others.......
....as evidenced on most Mac online tech forums, is that even when led by the hand or other appendage, most Mac users won't open a terminal window and enter a shell command if their lives depend on it, so ironically, they're almost all safe from this wheeze.
Jokes told in Linux just don't have the same punchlines when told to a native OS X-speaker.
Unless the user is a member of sudoers group, then that command would have no effect. See also "Protection of the filesystem root" ...
--
never type Google into Google, you can break the Internet ..