Isn’t it enough to just enter your password once to login, then receive a warning whenever you’re about to do something potentially dangerous?

If it’s such a big security risk, how come the most popular and widely used operating systems in the world and their users seem to be unaffected by it?

I guarantee, most new users coming to Linux from Windows/macOS are going to laugh and look at you funny if you try to justify entering your password again and again and again.

  • macniel@feddit.de
    link
    fedilink
    arrow-up
    10
    ·
    4 months ago

    If it’s such a big security risk, how come the most popular and widely used operating systems in the world and their users seem to be unaffected by it?

    Are they though? My corporate managed Windows machine either refuses an elevated command or asks me for my password/fingerprint. Same with macOS. Just because you don’t secure your Windows machine doesn’t mean other do the same.

    I guarantee, most new users coming to Linux from Windows/macOS are going to laugh and look at you funny if you try to justify entering your password again and again and again.

    the least pressing concern for any Windows/macOS user. Besides, you can install user-wide application without any password requirement, if you want to change something on system level (and lets face it, when does a regular user does that on a regular basis?) you need to have some sort of security.

  • Schwim Dandy@lemm.ee
    link
    fedilink
    arrow-up
    6
    ·
    4 months ago

    You can easily fine tune what requires a password in Linux by editing the /etc/sudoers file.

  • originalucifer@moist.catsweat.com
    link
    fedilink
    arrow-up
    9
    arrow-down
    3
    ·
    4 months ago

    microsoft doesnt want to annoy people, but in a corporate environment this requirement is fully implemented on windows.

    i was never under the impression macs belonged in a business environment. maybe apple just doesnt find that level of security important.

    • john89@lemmy.caOP
      link
      fedilink
      arrow-up
      1
      ·
      4 months ago

      Thank you for the informative response. I was unaware Windows machines employed similar behavior in corporate environments.

      Do you think, then, that it would be acceptable for Linux to remove these restrictions in home environments?

      • originalucifer@moist.catsweat.com
        link
        fedilink
        arrow-up
        4
        arrow-down
        1
        ·
        4 months ago

        no. no reason to expand poor practices into linux because microsoft fucked up. we need ‘least access required’ methodology even at home because the world is full of bad actors.

        if microsoft had correclty implemented security into dos/winx.x we wouldnt have had half the virus issues we did in the late 90s.

        i think the other half was caused by activex

        • john89@lemmy.caOP
          link
          fedilink
          arrow-up
          1
          arrow-down
          1
          ·
          4 months ago

          I don’t think the security issues with windows stem from not having the user enter their password a bunch of times.

  • 999999999@lemmy.ml
    link
    fedilink
    arrow-up
    6
    arrow-down
    1
    ·
    4 months ago

    Just because anything is popular or widely used it doesn’t mean it is good or correct. Driving drunk with no seatbelt and with your underage children in the seat upfront was legal. Much like vaccines and seatbealts designs are free (as in open) because they were too good to be sold and would be unethical to do otherwise.

    So if you think a computer is a simple machine and want to treat it as a screwdriver go ahead, most users are not smart to use computers anyway. Because of that most people do not even read what they are installing much less the messages they appear and then they ask why they get viruses or why their system does not work.