I assume that there's a research OS somewhere that has discovered that this is much harder than it looks for anything nontrivial; quite possibly even worse than the problem that it is intended to cure; but looking at the increasingly elaborate constructs used when sudo is intended to be a granular delegation makes me wonder if the correct approach lies down the path of better permissions rather than ad-hoc lockdown logic.

There are some cases(eg. password-change or login tools often both reflect granularity limits in credential storage; and make reads or edits on your behalf to parts of files that you wouldn't be allowed to touch directly; but also do things like enforce complexity or age requirements that would require a really expansive view of 'permissions' to encompass) where the delegate program is handling nontrivial delegation logic on its own; but in a lot of instances it's hard to escape the impression that you are basically bodging on 'roles' that can't be or aren't normally expressed in object and device permissions by building carefully selectively broken tools.

I obviously don't blame sudo for that; its scope is letting you run a particular thing as someone else if the sudoers file allows it; but a lot of sudoers files might as well just say "there are no roles on this system between 'useless' and 'apocalyptic'"; and that feels like a permissions design problem.

Of note; probably not one to try to NT yourself out of; I'm not sure that you can build a sufficiently expressive set of permissions on classic UNIX style ones; but I've yet to see an NT-derived system that didn't boil down to 'admin-which-can-be-SYSTEM-at-a-whim'/'little people' regardless of the wacky NT ACL tricks you can get up to.

I'm curious if it's a case of the alternatives being tried and largely found to be worse; or if (along with a number of other OS design/architecture fights) the whole thing has mostly been pushed out of mainstream relevance by the degree to which you can just pretend everything inside a worker VM is basically at a homogeneous privilege level if you don't want to deal with it.

It seems like a way to do multiplication by doing addition.

That's because that's exactly what it's for, along with doing division via subtraction. And, you can use loglogs (the logarithm of a logarithm) to do exponentiation and find roots. Interestingly, I once mentioned loglogs to two friends, a physics professor and a mathematical astronomer turned programmer and neither of them recognized what I was talking about.

They aren't editing an evidence photo, they're editing a copy of an evidence photo. The edited version would never be entered as evidence, only the original would be.

If the summary is correct (which isn't a guarantee, I know), they didn't straight up lie; nobody intentionally made the modifications, it was the photo editing software that tried to be helpful. You can certainly criticize them for not noticing the changes, but my guess is that whoever originally said they didn't modify the photo just asked other people and didn't personally check for themselves.

I notice that you confine your reply to a cheap shot about my supposed ignorance and avoid responding to my question about the battle that turned the IJN back for the first time and the one that crushed its main strike force, and taking the initiative away from them for the rest of the war.

I agree entirely. I teach an intro to programming course at one of the well-known universities. It is a lab course with 2 hours of teaching contact time per week, 2 hours of reading time per week, and 8 hours of expected programming time per week. The students learn by doing.

Aw, c'mon. Basic is a horrible, horrible language that teaches poor habits and has almost no translation to serious programming.

If you want to have kids learn something easy that at least teaches good organization and thought processes, then teach them Scheme.

Most "don't feed the animals" rules are because people tend to feed animals "unnatural" foods like processed grains and meats, which aren't safe for the animals to eat.

On the Internet, nobody knows you're a cat?

The expression is "script kiddie". It has nothing to do with kittens.

The decisive Japanese and German defeats were dispensed by other armies.

Really? Where were all of those allies fighting during the Battle of the Bulge and where was the Royal Navy during the Battles of the Coral Sea and Midway?

What do you find so funny about the University of Bologna? It was founded in 1088 CE, and is the oldest continually operating university in the world. And no, I didn't know any of that until I read your post and took a moment to do the trivial bit of research that you should have done before showing the world how ignorant you are and how unwilling to learn. Now get off my lawn and go tell your mother she wants you!

The systemd version takes a similar approach - only handling the 99.9% use case of running a local command as a different user based on some basic rules and only really providing a userspace implementation without suid.

IIRC that use case is about 15% of OG sudo's code but most distros carry around all the features. I dunno, maybe it can be compiled without those but I don't see that in distros I've used.

Corporatism is a distinct concept from Capitalism. That's the one you're describing. There's been a psyop by Socialists to describe corporatism as capitalism so they get more of a merger of business and State (fascism).

Corporations are creations of a government in which governments get a cut and politicians get bribes in exchange for protection from justice for the corporate actors' crimes.

If you read Adam Smith he described this as Mercantilism in his time and recommended free market capitalism as its antidote with an emphasis on the accumulation of capital and investment into more competitive production.

Von Mises fleshed this out more a couple centuries later (followed by Hayek and Rothbard). The definitive work is /Man, Economy, and State/ which breaks it all down in tremendous detail.

Notably corporations in the early USA were limited to public works projects and had time-limited grants (e.g. for building a bridge or later the railroads).

JD Rockefeller bribed Congress during Reconstruction to make corporations permanent, so he wouldn't lose his charter for Standard Oil. He later wrote the Sherman Anti-trust Act to hurt his competition.

Today we have immortal psychopathic corporations with a legal mandate to be depraved and with legal personhood. The Dulles brothers created the CIA to fight wars and conduct assassinations on behalf of the corporations. cf. United Fruit or the Pepsi War.

After the Revolution remember to forbid corporations. The Gini Coefficient is too damn high.