Re: I am curious
So you think that's a valid citation to describe someone as "functionally illiterate". Very informative.
Irrespective of whether or not you're the previous A/C I can see why you post that way.
41816 publicly visible posts • joined 16 Jun 2014
Do any of us know who we are?
Are we the person named on our birth certificate? The child whose birth is recorded there was present but in no fit state to take notes. We rely entirely on what we've been told by those who told us they were our parents.
And that's before we consider those who are fraudulently using a birth certificate or other documents.
"Thus, if $BIG_COMPANY can outsource compliance to a third-party solution"
At a first glance it has doubled the attack surface. In reality the 3rd party might be outsourcing to more companies so it may have done more than double its attack surface. In practice such outsourcers, by performing the same role for more end-user facing companies, are a juicier target than any single end-user facing company and will attract more determined attempts to crack them. When the least well defended of those goes down the blame, lawsuits and general opprobrium will inevitably fall on the end-user facing company with added blame for not being capable of looking after its own affairs itself.
What Brexiters ignored, despite being told many times, was that Brexit would cut British business's home market from 28 countries to less than one (allowing for the frontier they created in the Irish Sea) and that for many of them that would mean their future job prospects would be on the line. And they're still ignoring it.
And before you point out that many of them would be retired many of them would also, like me, have working age children and grandchildren who would become working age if they weren't there already.
"Admittedly, they tried that with Brexit, but I guess they decided to pull out of that economic nose dive before everything went North Korean."
Far too many of the Brexiters haven't. I doubt there's any depths to which the post-Brexit economy will plunge before they accept it was their fault. When your heads stuck in the sand you can't see what's happening around you.
"What was also ignored is that Civil Servants are still one of the only groups to have gold plated final salary pensions"
I get fed up with pointing out that IME the Civil Service scheme was not gold-plated. I had a far better deal moving into the private sector. The Civil Service pension scheme had less value per year served in terms of final salary and the non-contributory aspect was a salary sacrifice scheme and a bit of a con trick because it lowered the final salary on which the pension was calculated. More pinchbeck than gold-plate,
It's worth bearing in mind that it's the bollocks being made of that very CS pension scheme that's the focus of this thread.
And apart from that, a pox on your casual ageism.
"This leaves governments filled with the same Etonian based connected mates in Politics and civil service"
We had a generation of politicians, starting from Wilson, through Heath & Thatcher who came up through the grammar school system. It was Wilson & his cronies who pulled up that ladder behind them. The next generation were largely headed by public schoolboys again.
Doctor Syntax has been administering various Unix systems from Edition 7 days until he retired. In particular he may know more than DaDragon because he remembers how privileges could be split up before sudo in a way that didn't fail a basic principle.
In view of discussion further down thread he also knows that su did not mean for "superuser". It was an abbreviation of "substitute user". su lpadmin meant that the user could run a shell as lpadmin and needed lpadmin's password - an additional key to gain additional privilege which is the better way to do it.
"Isn't it a bit more complex than that. The real issue is a god like 'root' user that can do anything."
It is more complex than that. Once upon a time in Unix there were specific user IDs with specific powers. You wan somebody to administer print queues? Give them the lpadmin login. They can use it to administer print queues and nothing more. When I started using Unix there was a user ID bin who owned any system executables that didn't have to be suid to a specific user. The user with the bin password could update software.
It was never as well implemented as it might be, probably because in practice there might only be one administrator to do everything or else all the administrative group needed to do everything. It was a right pain, for instance, if the DBA needed to go cap - or paperwork - in hand to somebody else to get more disk allocated. And I don't recall there being a specific user for password resets or user creation although that might be aged memory.
We got, therefore, to the situation where admins got the root password and the alternative ways of doing things were forgotten so that when anybody got agitated about this sudo got invented. And sudo has one big disadvantage. It fails Saltzer and Shroeder's separation of privileges principle:
"Where feasible, a protection mechanism that requires two keys to unlock it is more robust and flexible than one that allows access to the presenter of only a single key."
It means that instead of requiring two separate passwords to get from a login prompt to executing something that requires elevated privilege it just needs the one password applied twice. If the sudo user's password gets leaked then whoever acquired needs nothing more and as the usual case is, as before, there's just ordinary user and root privileges, it's root that's leaked.
Add to that the fact that you've enlarged the attack surface - and ISTR reports of a bug in sudo - you've introduced a security hole by trying to plug one.
My view is that in most cases sudo makes a system less secure by its presence.
Exactly. That's why I'd like to see the scheme applied to the Ainley roundabout. The idea occurs to me every time I'm queued up at the top of the hill out of Elland or coming down from the M62 which used to be my daily commute years ago. It's a roundabout that covers a lot of ground so there would be plenty of room to implement it.
But I suspect it would confuse the hell out of Waymo.
There's a further point of comparison.
Back then there was an assumption that an economy could exist which was able to ignore the inflationary effects of rising house prices to maintain low interest rates.
Nor there's an assumption that an economy can exist which is able to ignore the amount of money already burnt on AI data centres to provide a return on investment.