Top all-time · #21310
Jonas Termansen
Personal blog · maxsi.org/blogprogrammingsystemssecurity
Jonas Termansen writes Jonas 'Sortie' Termansen, a personal blog at maxsi.org about programming, systems and security. Since 2016, 3 different Hacker News readers have linked it 3 times. No feed was found, so read it on the site itself.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
Linked for Jonas Termansen's Sortix operating system, which one commenter called quite an achievement, and for a setuid-executables discussion. Comments do not judge the writing itself.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
What Hacker News says?
Quite an achievement. The author is terrifyingly young: http://maxsi.org/
Comment linking /
on “Sortix 1.0 Operating System Released”Submitted C String Creation as a story · 67 points
HN discussion>most of the other use cases (mount, pt-chown, dbus-daemon-launch-helper, etc.) Those listed examples could also be could be achieved with IPC to a privileged daemon. But unfortunately not all setuid executables can be replaced that way. The major design flaw with setuid executables is that they run in an execution environment (view of the root filesystem, Linux namespace, etc.) provided by the caller. A good explan…
Comment linking /blog/setuid-bit-considered-harmful/
on “Introducing rkt’s ability to detect privilege escalation attacks on containers”