Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Actually we spent MONTHS debating the pros and cons of adding a sudo on Windows.

Curiously, Windows is more secure than linux because it _doesn't_ have a sudo.

In Windows, any application can set messages to another window at the same integrity level with SendMessage/PostMessage.

If you had a `sudo` on windows, you could have a medium-IL terminal window which is talking to a high-IL process (running with the hypothetical sudo), and any other medium-il process could drive the console, effectively creating an escalation of privilege attack vector.

Its very much by design.



See my answer bellow.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: