{"slug": "sudo", "name": "sudo", "category": "terminal", "category_name": "Terminal and shell", "description": "", "recommenders": 5, "commenters": 27, "warners": 7, "score": 1.991, "rising": -0.31, "first": "2025-11-15", "latest": "2026-08-14", "why": "I love the hell out of the program; it's an essential part of how I get shit done on my PC.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 5, "neutral": 13, "compare": 2, "warn": 7}, "spark": [0, 0, 0, 3, 1, 0, 0, 0, 0, 1, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "I love the hell out of the program; it's an essential part of how I get shit done on my PC.", "kind": "", "icon": true, "domain": "sudo.ws", "github_repo": null, "official_url": "https://www.sudo.ws", "pricing": "", "aliases": ["sudo"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 788927440, "item_id": 49307965, "url": "https://news.ycombinator.com/item?id=49307965", "by": "mmh0000", "date": "2026-08-14", "version": null, "stance": "recommend", "quote": "configure sudo correctly", "excerpt": "This is a bad idea\u2122. You should never have more than one UID 0 on a Unix system. This will violate most corporate security guidelines (STIG and CIS) *. And for good reason. A much better idea is to set up a non-root user and configure sudo correctly. * https://www.stigviewer.com/stigs/red_hat_enterprise_linux_9/2023-12-01/finding/V-258059", "context": "", "use_case": "privilege escalation", "switched_from": "", "story": "I close SSH port 22 (and what I use instead)"}, {"id": 758977360, "item_id": 47436085, "url": "https://news.ycombinator.com/item?id=47436085", "by": "simoncion", "date": "2026-03-19", "version": null, "stance": "recommend", "quote": "I love the hell out of the program; it's an essential part of how I get shit done on my PC.", "excerpt": "First off, thanks very much for giving me exactly what I asked for. You propose that instead of sometimes running ~five lines of C as root, I do one of the following: 1) Run a persistent whole-ass daemon using something for IPC... maybe DBUS, maybe HTTP, and all the code that that pulls in. 2) Use a setuid root program [0] to run the entire program as root, rather than just the ~five lines that need root privs. 3) Us", "context": "", "use_case": "", "switched_from": "", "story": "CVE-2026-3888: Important Snap Flaw Enables Local Privilege Escalation to Root"}, {"id": 749886320, "item_id": 46867895, "url": "https://news.ycombinator.com/item?id=46867895", "by": "wodniok", "date": "2026-02-02", "version": null, "stance": "recommend", "quote": "Or here.\n\nhttps://opencollective.com/sudo-project", "excerpt": "Or here. https://opencollective.com/sudo-project", "context": "", "use_case": "Sudo maintenance funding", "switched_from": "", "story": "Todd C. Miller \u2013 sudo Maintainer for over 30 years"}, {"id": 749860784, "item_id": 46866299, "url": "https://news.ycombinator.com/item?id=46866299", "by": "ilaksh", "date": "2026-02-02", "version": null, "stance": "recommend", "quote": "Can donate there.", "excerpt": "https://github.com/sponsors/sudo-project Can donate there. My bank account is basically empty but I will contribute a few bucks.", "context": "", "use_case": "", "switched_from": "", "story": "Todd C. Miller \u2013 sudo Maintainer for over 30 years"}, {"id": 749833408, "item_id": 46864588, "url": "https://news.ycombinator.com/item?id=46864588", "by": "s5fs", "date": "2026-02-02", "version": null, "stance": "recommend", "quote": "why this project is still under active development", "excerpt": "Things have changed quite a bit in the past 30 years! I encourage you to peek at their changelog (https://www.sudo.ws/releases/changelog/) for more insight into why this project is still under active development.", "context": "", "use_case": "", "switched_from": "", "story": "Todd C. Miller \u2013 sudo Maintainer for over 30 years"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 769658049, "item_id": 48103628, "url": "https://news.ycombinator.com/item?id=48103628", "by": "lrvick", "date": "2026-05-11", "version": null, "stance": "warn", "quote": "For servers, sudo or a package manager etc should not exist", "excerpt": "In my case I use QubesOS so sudo is useless even if present since every security domain is isolated by hypervisor. For servers, sudo or a package manager etc should not exist. There is no good reason for servers to run any processes as root or have any way to reach root. Servers should generally be immutable appliances.", "context": "", "use_case": "", "switched_from": "", "story": "TanStack NPM Packages Compromised"}, {"id": 769654112, "item_id": 48103382, "url": "https://news.ycombinator.com/item?id=48103382", "by": "TacticalCoder", "date": "2026-05-11", "version": null, "stance": "warn", "quote": "Not on my Linux workstation though. No sudo command installed.", "excerpt": "> Sudo is security theater. Yes indeed. > Malware can make a fake unprivileged sudo that sniffs your password. Not on my Linux workstation though. No sudo command installed. Not a single setuid binary. Not even su. So basically only root can use su and nobody else. Only way to log in at root is either by going to tty2 (but then the root password is 30 characters long, on purpose, to be sure I don't ever enter it, so ", "context": "", "use_case": "", "switched_from": "", "story": "TanStack NPM Packages Compromised"}, {"id": 765480064, "item_id": 47842504, "url": "https://news.ycombinator.com/item?id=47842504", "by": "kelseyfrog", "date": "2026-04-20", "version": null, "stance": "warn", "quote": "I don't use sudo.", "excerpt": "For the same reason, I don't use sudo. Despite being patched, the presence of prior vulnerabilities [1] and hacks makes it fundamentally not trustworthy. 1. https://app.opencve.io/cve/?vendor=sudo_project", "context": "", "use_case": "", "switched_from": "", "story": "EU Age Verification Hacked in 2 Minutes: What Happened"}, {"id": 759570096, "item_id": 47473131, "url": "https://news.ycombinator.com/item?id=47473131", "by": "eapressoandcats", "date": "2026-03-21", "version": null, "stance": "warn", "quote": "what does sudo even protect anymore", "excerpt": "One thing to note is that pretty much every other password field shows length, and the fact that sudo is so much more paranoid reminds me of this XKCD: https://xkcd.com/1200/ Seriously, what does sudo even protect anymore, and when are you typing it with someone looking over your shoulder? If you have a Linux or Mac desktop, the login password prompt has the same design choice regarding showing characters and is much", "context": "", "use_case": "run commands as root", "switched_from": "", "story": "Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords"}]}], "who": [], "tags": [], "use_cases": ["privilege escalation", "privilege escalation prompts for agents", "run commands as root", "sudo maintenance funding", "running commands as root", "privilege control via ldap groups"], "compared": [{"slug": "run0", "name": "run0", "co": 5, "switched_from": 0, "switched_to": 1}, {"slug": "doas", "name": "doas", "co": 3, "switched_from": 0, "switched_to": 1}, {"slug": "sudo-rs", "name": "sudo-rs", "co": 2, "switched_from": 0, "switched_to": 0}, {"slug": "linux", "name": "Linux", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=46858577", "title": "Todd C. Miller \u2013 sudo Maintainer for over 30 years", "mentions": 13}, {"url": "https://news.ycombinator.com/item?id=48100706", "title": "TanStack NPM Packages Compromised", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=47464134", "title": "Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=46045972", "title": "APT Rust requirement raises questions", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=49248388", "title": "I close SSH port 22 (and what I use instead)", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48411635", "title": "Did Claude Increase Bugs in Rsync?", "mentions": 1}], "sentiment_by_month": {"2025-11": {"neutral": 1, "warn": 2}, "2025-12": {}, "2026-01": {}, "2026-02": {"neutral": 11, "recommend": 3, "warn": 1}, "2026-03": {"recommend": 1, "compare": 1, "warn": 1}, "2026-04": {"warn": 1}, "2026-05": {"warn": 2, "neutral": 1}, "2026-06": {"compare": 1}, "2026-07": {}, "2026-08": {"recommend": 1}, "2026-09": {}, "2026-10": {}}, "versions": [], "version_unnamed": 0, "family_ref": null, "runs_on": null, "lines": [], "quotes": [{"id": 788927440, "item_id": 49307965, "url": "https://news.ycombinator.com/item?id=49307965", "by": "mmh0000", "date": "2026-08-14", "version": null, "stance": "recommend", "quote": "configure sudo correctly", "excerpt": "This is a bad idea\u2122. You should never have more than one UID 0 on a Unix system. This will violate most corporate security guidelines (STIG and CIS) *. And for good reason. A much better idea is to set up a non-root user and configure sudo correctly. * https://www.stigviewer.com/stigs/red_hat_enterprise_linux_9/2023-12-01/finding/V-258059", "context": "", "use_case": "privilege escalation", "switched_from": "", "story": "I close SSH port 22 (and what I use instead)"}, {"id": 774743619, "item_id": 48421476, "url": "https://news.ycombinator.com/item?id=48421476", "by": "MYEUHD", "date": "2026-06-05", "version": null, "stance": "compare", "quote": "doas is ~1k lines vs 160k for sudo", "excerpt": "I have already been using openrsync even before the recent AI drama. Just like I have been using doas for several years. All I need is `rsync -urvP` and I suspect the majority of users don't need the advanced features either. The smaller code base also means less bugs and vulnerabilities. As an example doas is ~1k lines vs 160k for sudo. That surely means a smaller attack surface. The same is true for openrsync and r", "context": "", "use_case": "privilege escalation", "switched_from": "", "story": "Did Claude Increase Bugs in Rsync?"}, {"id": 770718848, "item_id": 48169928, "url": "https://news.ycombinator.com/item?id=48169928", "by": "martinald", "date": "2026-05-17", "version": null, "stance": "neutral", "quote": "I use sudo -A with some openssh ui for sudo.", "excerpt": "I use sudo -A with some openssh ui for sudo. I tell the agent to use sudo -A for anything that it needs and then it pops up with a sudo password prompt.", "context": "", "use_case": "Privilege escalation prompts for agents", "switched_from": "", "story": "I love Linux, but I can't quit Windows"}, {"id": 769658049, "item_id": 48103628, "url": "https://news.ycombinator.com/item?id=48103628", "by": "lrvick", "date": "2026-05-11", "version": null, "stance": "warn", "quote": "For servers, sudo or a package manager etc should not exist", "excerpt": "In my case I use QubesOS so sudo is useless even if present since every security domain is isolated by hypervisor. For servers, sudo or a package manager etc should not exist. There is no good reason for servers to run any processes as root or have any way to reach root. Servers should generally be immutable appliances.", "context": "", "use_case": "", "switched_from": "", "story": "TanStack NPM Packages Compromised"}, {"id": 769654112, "item_id": 48103382, "url": "https://news.ycombinator.com/item?id=48103382", "by": "TacticalCoder", "date": "2026-05-11", "version": null, "stance": "warn", "quote": "Not on my Linux workstation though. No sudo command installed.", "excerpt": "> Sudo is security theater. Yes indeed. > Malware can make a fake unprivileged sudo that sniffs your password. Not on my Linux workstation though. No sudo command installed. Not a single setuid binary. Not even su. So basically only root can use su and nobody else. Only way to log in at root is either by going to tty2 (but then the root password is 30 characters long, on purpose, to be sure I don't ever enter it, so ", "context": "", "use_case": "", "switched_from": "", "story": "TanStack NPM Packages Compromised"}, {"id": 765480064, "item_id": 47842504, "url": "https://news.ycombinator.com/item?id=47842504", "by": "kelseyfrog", "date": "2026-04-20", "version": null, "stance": "warn", "quote": "I don't use sudo.", "excerpt": "For the same reason, I don't use sudo. Despite being patched, the presence of prior vulnerabilities [1] and hacks makes it fundamentally not trustworthy. 1. https://app.opencve.io/cve/?vendor=sudo_project", "context": "", "use_case": "", "switched_from": "", "story": "EU Age Verification Hacked in 2 Minutes: What Happened"}, {"id": 759570096, "item_id": 47473131, "url": "https://news.ycombinator.com/item?id=47473131", "by": "eapressoandcats", "date": "2026-03-21", "version": null, "stance": "warn", "quote": "what does sudo even protect anymore", "excerpt": "One thing to note is that pretty much every other password field shows length, and the fact that sudo is so much more paranoid reminds me of this XKCD: https://xkcd.com/1200/ Seriously, what does sudo even protect anymore, and when are you typing it with someone looking over your shoulder? If you have a Linux or Mac desktop, the login password prompt has the same design choice regarding showing characters and is much", "context": "", "use_case": "run commands as root", "switched_from": "", "story": "Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords"}, {"id": 759437953, "item_id": 47464872, "url": "https://news.ycombinator.com/item?id=47464872", "by": "timhh", "date": "2026-03-21", "version": null, "stance": "compare", "quote": "I doubt it would have happened with the original sudo", "excerpt": "I did this! I didn't actually know that Mint had enabled this by default. That would have been a useful counterpoint to the naysayers. If you want the original behaviour you don't actually need to change the configuration - they added a patch afterwards so you can press tab and it will hide the password just for that time. > The catalyst for Ubuntu\u2019s change is sudo-rs Actually it was me getting sufficiently pissed of", "context": "", "use_case": "", "switched_from": "", "story": "Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords"}, {"id": 758977360, "item_id": 47436085, "url": "https://news.ycombinator.com/item?id=47436085", "by": "simoncion", "date": "2026-03-19", "version": null, "stance": "recommend", "quote": "I love the hell out of the program; it's an essential part of how I get shit done on my PC.", "excerpt": "First off, thanks very much for giving me exactly what I asked for. You propose that instead of sometimes running ~five lines of C as root, I do one of the following: 1) Run a persistent whole-ass daemon using something for IPC... maybe DBUS, maybe HTTP, and all the code that that pulls in. 2) Use a setuid root program [0] to run the entire program as root, rather than just the ~five lines that need root privs. 3) Us", "context": "", "use_case": "", "switched_from": "", "story": "CVE-2026-3888: Important Snap Flaw Enables Local Privilege Escalation to Root"}, {"id": 751511313, "item_id": 46969457, "url": "https://news.ycombinator.com/item?id=46969457", "by": "accrual", "date": "2026-02-10", "version": null, "stance": "neutral", "quote": "I use use sudo or doas as a regular user once logged in.", "excerpt": "> ssh needs a capability to let root logins One can disable root login via SSH in /etc/ssh/sshd_config. sshd also drops root priviledges once it's running IIRC. I use use sudo or doas as a regular user once logged in.", "context": "", "use_case": "Privilege escalation", "switched_from": "", "story": "The Day the Telnet Died"}, {"id": 750683924, "item_id": 46917745, "url": "https://news.ycombinator.com/item?id=46917745", "by": "madspindel", "date": "2026-02-06", "version": null, "stance": "warn", "quote": "Some insecure things on Linux: Dbus (kwallet etc.), sudo, fprint", "excerpt": "> Linux excels over Windows in the area of security by a wide margin No, this is wrong but might be true if you are talking about Linux package manager vs. Random Windows .exe on internet. But if you are talking about Secure Boot, encrypted disk, sudo etc. Windows is more secure but it looks like https://amutable.com/ will make Linux more secure like Windows. Edit: Some insecure things on Linux: Dbus (kwallet etc.), ", "context": "", "use_case": "", "switched_from": "", "story": "Microsoft open-sources LiteBox, a security-focused library OS"}, {"id": 749983264, "item_id": 46873954, "url": "https://news.ycombinator.com/item?id=46873954", "by": "burkaman", "date": "2026-02-03", "version": null, "stance": "neutral", "quote": "", "excerpt": "https://github.com/microsoft/sudo?tab=readme-ov-file#relationship-to-sudo-on-unixlinux > This project is not a fork of the Unix/Linux sudo project, nor is it a port of that sudo project. Instead, Sudo for Windows is a Windows-specific implementation of the sudo concept.", "context": "", "use_case": "", "switched_from": "", "story": "Todd C. Miller \u2013 sudo Maintainer for over 30 years"}, {"id": 749949664, "item_id": 46871854, "url": "https://news.ycombinator.com/item?id=46871854", "by": "kllrnohj", "date": "2026-02-03", "version": null, "stance": "neutral", "quote": "I wonder if sudo would be better off joining one of those open source foundations", "excerpt": "Google sponsors a lot of open source work: https://opensource.google/organizations-we-support I wonder if sudo would be better off joining one of those open source foundations instead of staying solo. It's too small to justify a meaningful amount of contribution to these companies, at which point the bureaucratic overhead of dealing with it probably kills the motivation", "context": "", "use_case": "", "switched_from": "", "story": "Todd C. Miller \u2013 sudo Maintainer for over 30 years"}, {"id": 749921088, "item_id": 46870068, "url": "https://news.ycombinator.com/item?id=46870068", "by": "Joe_Cool", "date": "2026-02-03", "version": null, "stance": "neutral", "quote": "You do realize the answer is right there: https://www.sudo.ws/about/logo/", "excerpt": "You do realize the answer is right there: https://www.sudo.ws/about/logo/ (and the old logo) ;)", "context": "", "use_case": "", "switched_from": "", "story": "Todd C. Miller \u2013 sudo Maintainer for over 30 years"}, {"id": 749886320, "item_id": 46867895, "url": "https://news.ycombinator.com/item?id=46867895", "by": "wodniok", "date": "2026-02-02", "version": null, "stance": "recommend", "quote": "Or here.\n\nhttps://opencollective.com/sudo-project", "excerpt": "Or here. https://opencollective.com/sudo-project", "context": "", "use_case": "Sudo maintenance funding", "switched_from": "", "story": "Todd C. Miller \u2013 sudo Maintainer for over 30 years"}, {"id": 749864448, "item_id": 46866528, "url": "https://news.ycombinator.com/item?id=46866528", "by": "varenc", "date": "2026-02-02", "version": null, "stance": "neutral", "quote": "sudo has A LOT of features that 95% of people don't use", "excerpt": "pros and cons to this approach, like the CVE introduced in sudo 9.1.14 (June 2023) fixed in 1.9.17p1 (June 2025). https://www.cve.org/CVERecord?id=CVE-2025-32463 But also sudo has A LOT of features that 95% of people don't use. Just checkout `man sudo` to get a sense for this. And it includes plugins like the popular visudo plugin. You can see from the release cadence that real improvements continue to be made. Thoug", "context": "", "use_case": "running commands as root", "switched_from": "", "story": "Todd C. Miller \u2013 sudo Maintainer for over 30 years"}, {"id": 749860784, "item_id": 46866299, "url": "https://news.ycombinator.com/item?id=46866299", "by": "ilaksh", "date": "2026-02-02", "version": null, "stance": "recommend", "quote": "Can donate there.", "excerpt": "https://github.com/sponsors/sudo-project Can donate there. My bank account is basically empty but I will contribute a few bucks.", "context": "", "use_case": "", "switched_from": "", "story": "Todd C. Miller \u2013 sudo Maintainer for over 30 years"}, {"id": 749833408, "item_id": 46864588, "url": "https://news.ycombinator.com/item?id=46864588", "by": "s5fs", "date": "2026-02-02", "version": null, "stance": "recommend", "quote": "why this project is still under active development", "excerpt": "Things have changed quite a bit in the past 30 years! I encourage you to peek at their changelog (https://www.sudo.ws/releases/changelog/) for more insight into why this project is still under active development.", "context": "", "use_case": "", "switched_from": "", "story": "Todd C. Miller \u2013 sudo Maintainer for over 30 years"}, {"id": 749789408, "item_id": 46861838, "url": "https://news.ycombinator.com/item?id=46861838", "by": "omoikane", "date": "2026-02-02", "version": null, "stance": "neutral", "quote": "I am not sure sudo is licensed under MIT or GPL", "excerpt": "I am not sure sudo is licensed under MIT or GPL, looks it's like a mix of licenses: https://github.com/sudo-project/sudo/blob/main/LICENSE.md The end of the first license says it's sponsored in part by DARPA.", "context": "", "use_case": "", "switched_from": "", "story": "Todd C. Miller \u2013 sudo Maintainer for over 30 years"}, {"id": 749784352, "item_id": 46861522, "url": "https://news.ycombinator.com/item?id=46861522", "by": "ryandrake", "date": "2026-02-02", "version": null, "stance": "neutral", "quote": "I'm kind of shocked that sudo gets active development and monthly releases.", "excerpt": "Reading the release history[1]. I'm kind of shocked that sudo gets active development and monthly releases. I would have thought that something this old and venerated would have been \"done\" long ago. 1: https://www.sudo.ws/releases/devel/", "context": "", "use_case": "", "switched_from": "", "story": "Todd C. Miller \u2013 sudo Maintainer for over 30 years"}, {"id": 749780896, "item_id": 46861306, "url": "https://news.ycombinator.com/item?id=46861306", "by": "groby_b", "date": "2026-02-02", "version": null, "stance": "neutral", "quote": "", "excerpt": "That's a nice slogan, but how does it work? Say, I clone sudo. Clearly, a human applying freedom zero. I use it in my projects. Probably still freedom zero. I use it in my CI pipeline for the stuff that makes me money... corporation or human? If it's corporation, what if I sponsor a not-for-profit that provides that piece of CI infra? The problem is that \"corporation or not\" has more shades than you can reasonably ac", "context": "", "use_case": "", "switched_from": "", "story": "Todd C. Miller \u2013 sudo Maintainer for over 30 years"}, {"id": 749773040, "item_id": 46860815, "url": "https://news.ycombinator.com/item?id=46860815", "by": "adolph", "date": "2026-02-02", "version": null, "stance": "neutral", "quote": "The purpose is to allow users access by ldap criteria like group", "excerpt": "The purpose is to allow users access by ldap criteria like group so the sodoers file need not be edited on each and every server. https://www.sudo.ws/docs/man/sudoers.ldap.man/", "context": "", "use_case": "Privilege control via LDAP groups", "switched_from": "", "story": "Todd C. Miller \u2013 sudo Maintainer for over 30 years"}, {"id": 749770864, "item_id": 46860679, "url": "https://news.ycombinator.com/item?id=46860679", "by": "ak009", "date": "2026-02-02", "version": null, "stance": "neutral", "quote": "wouldn't https://github.com/sponsors/sudo-project achieve the same thing in this case?", "excerpt": "wouldn't https://github.com/sponsors/sudo-project achieve the same thing in this case?", "context": "", "use_case": "privilege escalation tool", "switched_from": "", "story": "Todd C. Miller \u2013 sudo Maintainer for over 30 years"}, {"id": 749747152, "item_id": 46859197, "url": "https://news.ycombinator.com/item?id=46859197", "by": "divbzero", "date": "2026-02-02", "version": null, "stance": "neutral", "quote": "", "excerpt": "\u201cMachine Room Temperature\u201d from Todd C. Miller\u2019s website: https://www.millert.dev/therm/ Server exhaust fan temperature was typically 94\u00b0F (ranged 92\u00b0F to 96\u00b0F) over the previous week and has climbed to 97\u00b0F.", "context": "", "use_case": "", "switched_from": "", "story": "Todd C. Miller \u2013 sudo Maintainer for over 30 years"}, {"id": 736752368, "item_id": 46047023, "url": "https://news.ycombinator.com/item?id=46047023", "by": "anarki8", "date": "2025-11-25", "version": null, "stance": "warn", "quote": "Battle tested is not bulletproof", "excerpt": "> The problem is that rust is being shoved in pointless places with a rewrite-everything-in-rust mentality. > There's lunatics ... I think the problem is people calling developers \"lunatics\" and telling them which languages they must use and which software they must not rewrite. Battle tested is not bulletproof: https://cybersecuritynews.com/sudo-linux-vulnerability/ Applying strict compile time rules makes software ", "context": "", "use_case": "", "switched_from": "", "story": "APT Rust requirement raises questions"}, {"id": 736744176, "item_id": 46046511, "url": "https://news.ycombinator.com/item?id=46046511", "by": "mmastrac", "date": "2025-11-25", "version": null, "stance": "warn", "quote": "sudo is not fully battle tested, even today.", "excerpt": "sudo is not fully battle tested, even today. You just don't really see the CVEs getting press. https://www.oligo.security/blog/new-sudo-vulnerabilities-cve-2025-32462-and-cve-2025-32463", "context": "", "use_case": "", "switched_from": "", "story": "APT Rust requirement raises questions"}, {"id": 735094977, "item_id": 45943436, "url": "https://news.ycombinator.com/item?id=45943436", "by": "zerd", "date": "2025-11-15", "version": null, "stance": "neutral", "quote": "Even after 40 years of battle-hardening, it has had buffer overflow and double free vulnerabilities", "excerpt": "Even after 40 years of battle-hardening, it has had buffer overflow and double free vulnerabilities discovered recently, which Rust protects against. sudoedit one was pretty bad. https://www.sudo.ws/security/advisories/", "context": "", "use_case": "", "switched_from": "", "story": "Sudo-Rs Affected by Multiple Security Vulnerabilities"}]}