Microsoft: Introducing Sudo for Windows - eviltoast

Shipped in Windows 11 Insider Preview Build 26052. https://www.tiraniddo.dev/2024/02/sudo-on-windows-quick-rundown.html claims it has a big security problem that makes the program accept calls to elevate from anywhere once first run

Edit:

  1. The security problem has been internally fixed and will be available in the next release
  2. It’s not just an alias for ‘runas’. It seems to be able to configurably block user input for sudo’d commands, retain the existing environment, ditch it and open a new window, and remember that you’ve sudo’d in the last minute or so.
  3. It brings up UAC instead of having you input the password
    • _sideffect@lemmy.world
      link
      fedilink
      English
      arrow-up
      25
      ·
      11 months ago

      I fucking LOATHE their same page redirect every time I mistakenly click on a MS answers page

      • herrcaptain@lemmy.ca
        link
        fedilink
        English
        arrow-up
        21
        ·
        11 months ago

        It’s even worse because if you’ve found your way to MS answers you’re clearly desperate because nothing came up on a real site. So you’re already in a bad mood and then - BLAM - redirect!

        • 800XL@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          ·
          11 months ago

          And then the answer is posted twice in a row from the the same expert and reads: “thank you for contacting Microsoft Answers. We are closing this thread as it’s reached the maximum age of -21479632”.

          • Toes♀@ani.social
            link
            fedilink
            English
            arrow-up
            4
            ·
            11 months ago

            I hate how every recommended answer is some copy paste guide on how to reset the PC. If that is your go to fix for everything you’re a garbage technician.

      • AnonStoleMyPants@sopuli.xyz
        link
        fedilink
        English
        arrow-up
        5
        ·
        11 months ago

        Thankfully you can right click the “back” button and it’ll give you a list of couple of last sites and you can just so it from there. It is still annoying though.

  • tabular@lemmy.world
    link
    fedilink
    English
    arrow-up
    25
    ·
    11 months ago

    Sudo already exists, is it okay to just name a different program by the same name?

    Guess which one Bing search will try harder to return.

    • Salzkrebs@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      ·
      11 months ago

      I hate searching for sway config stuff using DDG (which returns Bing results).

      Chances are never zero that that there is an outdated MS product with the same name of what you’re searching.

      • Victor@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        11 months ago

        Hold up. DDG returns Bing results? TIL. Is that true? How do we know? Do they state this, themselves?

        • Aatube@kbin.socialOP
          link
          fedilink
          arrow-up
          8
          ·
          11 months ago

          https://duckduckgo.com/duckduckgo-help-pages/results/sources/

          Most of our search result pages feature one or more Instant Answers. To deliver Instant Answers on specific topics, DuckDuckGo leverages many sources, including specialized sources like Sportradar and crowd-sourced sites like Wikipedia. We also maintain our own crawler (DuckDuckBot) and many indexes to support our results. Of course, we have more traditional links and images in our search results too, which we largely source from Bing. Our focus is synthesizing all these sources to create a superior search experience.

          • Victor@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            10 months ago

            Wow okay. It’s not their only source, which I came to believe. That’s good, then. Thank you for the link and quote!

    • brick@lemm.ee
      link
      fedilink
      English
      arrow-up
      9
      ·
      11 months ago

      In your mind, do you really think that is the intention here? Seems more like a convenience for people who use both Linux and Windows.

      I have to use both so I welcome it.

      • naticus@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        11 months ago

        Seriously. My home PC runs Linux primarily, but I sysadmin both Windows and Linux at work and this will be very convenient. Forgetting to run PowerShell as admin is always frustrating, especially when I have the commands and variables already established.

  • Phoenixz@lemmy.ca
    link
    fedilink
    English
    arrow-up
    32
    arrow-down
    16
    ·
    11 months ago

    Install Linux already, get it over with. Windows has been and still is a sad joke, why pay for that crap?

    • PlutoniumAcid@lemmy.world
      link
      fedilink
      English
      arrow-up
      13
      ·
      11 months ago

      Sure, tell my corporate overlords to do that, on thousands of computers across the globe.

      At home i can do what I want, at work I have to bow down.

    • QuarterSwede@lemmy.world
      link
      fedilink
      English
      arrow-up
      10
      arrow-down
      1
      ·
      11 months ago

      Because business uses Windows services, which are, by far, the most common. And when collaborating and sharing files is essential this is a major deal breaker. I love *nix but it just wouldn’t work as well in the business world until there are wide spread services that replicate or do better than what Microsoft does with enterprise support and pricing in mind.

      • moriquende@lemmy.world
        link
        fedilink
        English
        arrow-up
        7
        arrow-down
        3
        ·
        11 months ago

        You can get a legit Windows 11 key for like 5 bucks, no reason not to install it honestly. Even if only for dual booting, it can save you a lot of headaches.

      • JackGreenEarth@lemm.ee
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        11
        ·
        11 months ago

        A product key, which allows you to use Windows to its fullest, costs money to Microsoft.

        • tutus@links.hackliberty.org
          link
          fedilink
          English
          arrow-up
          6
          ·
          11 months ago

          That’s a myth that people need to stop spreading.

          Microsoft is a business. Microsoft is also not stupid. If it cost them more to provide a product than it makes them, they wouldn’t provide it. They’re is a huge amount of examples of them doing this. They don’t provide it because they’re nicer guys.

          Microsoft uses Windows, and all of it’s products, as a vehicle for Azure and advertisers. Everything they do feeds into that one way or another.

          Microsoft stopped being a software company some time ago.

        • Aatube@kbin.socialOP
          link
          fedilink
          arrow-up
          4
          arrow-down
          1
          ·
          edit-2
          11 months ago

          Most people here pirate it or get the price bundled with their manufacturer. It’s surprisingly easy

  • purplemonkeymad@programming.dev
    link
    fedilink
    English
    arrow-up
    9
    ·
    edit-2
    11 months ago

    Ok, so yea just a “better” version of runas. I can see it being a bit easier when you just need to do the one thing as admin, but overall just opening an admin windows is still going to be the best way.

    I really think the security issues makes it not worth enabling.

    • w2tpmf@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      1
      ·
      edit-2
      11 months ago

      Yep. It’s basically an alias for:

      runas /user:administrator
      

      If you want to open a new command line window with admin privs you can always do:

      runas /user: administrator CMD.exe
      

      Which is of course on Linux this would kinda be like running:

      sudo su
      
    • tabular@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      11 months ago

      Would love to use a smaller, single-user multi-account, version of sudo. If (on Debian based) doas can remember I entered the password a command ago in the same bash terminal, and had more adoption/eyes on it, then I’d use it.

  • vext01@lemmy.sdf.org
    link
    fedilink
    English
    arrow-up
    2
    ·
    11 months ago

    Tell me it has a better configuration format than sudo.

    (I’ve ditched sudo for OpenBSD ‘doas’ across the board ever since it made its way into debian’s repos)