6 ms·
This doesn’t solve the problem either, which is that of the Confused Deputy [1]. An arbitrary piece of code I’m downloading shouldn’t be able to run as Ryan by
by ryanjshaw 5mo ago
This doesn’t solve the problem either, which is that of the Confused Deputy [1]. An arbitrary piece of code I’m downloading shouldn’t be able to run as Ryan by default with access to everything Ryan has.
We need to revitalize research into capabilities-based security on consumer OSs, which AFAIK is the only thing that solves this problem. (Web browsers - literally user “agents” - solve this problem with capabilities too: webapps get explicit access to resources, no ambient authority to files, etc.)
Solving this problem will only become more pressing as we have more agents acting on our behalf.
[1] https://en.wikipedia.org/wiki/Confused_deputy_problem https://en.wikipedia.org/wiki/Confused_deputy_problem
- _3u10 5mo agoI’ve never seen code that is downloaded run itself. Why not be the change you want to see in the world and run sudo or spawn your browser in a jail. Or download as another user.
- endymi0n 5mo agoWelcome to npm post-install scripts... https://docs.npmjs.com/cli/v11/using-npm/scripts https://docs.npmjs.com/cli/v11/using-npm/scripts
- okanat 5mo agoAnd Rust build scripts: https://doc.rust-lang.org/cargo/reference/build-scripts.html https://doc.rust-lang.org/cargo/reference/build-scripts.html
- johnny22 5mo agoglad pnpm disables those by default!
- skeeter2020 5mo agoPSA: if you're using (a newish release of) npm you should have something like this as a default, unless you've got good reasons not to: min-release-age=7 # days ignore-scripts=true