Torvalds Calls OpenSUSE Security 'Too Intrusive'
jfruh writes "The balance between security and ease of use is always a tricky one to strike, and Linux distros tend to err on the side of caution. But no less a luminary than Linus Torvalds thinks openSUSE has gone too far. When his kid needed to call from school for the root password just so he could add a printer to a laptop, that's when Linus decided things had gone off the rails."
I see this on Macs a lot. If you want to install anything, you have to type an administrator's password.
In theory, that's great. But in effect, you are giving that installer root access. So if I understand correctly, that installer could be putting any amount of spyware (or whatever) into your computer and nearly perfectly cover its tracks.
Otoh, many Mac apps are distributed as disk images, where you simply drag them from the image to your drive, and that's it. No password at all. If you're going to use pre-rolled software, that certainly seems more trustworthy. But of course, it is a lot more complicated of a process for the average user to be able to ever understand.
He could have just added the user to the sudo group and been done.
But no, he had to go harping on everyone on bug lists and social media rants to put people down, even suggesting whoever made the system should die.
What an ass.
I love these responses. "It's not broken, incapable software, you just have to buy a different printer. Noob."
Only if your printer sucked. If you had a real printer you could just cat the postscript to whatever device it was connected to...
And that's why the year of Linux on the desktop will always be next year.
Yeah he can be a control freak, but in a way I can't blame him. Can you just imagine how many black hats would like to get into Torvalds home LAN? Consider also that the man is pulling over 250 thousand $$$ per year wouldn't somebody like to sniff his network?
C|N>K
It's somehow the (free) operating system's fault because printer manufacturers design their hardware around yet another half-baked printing protocol instead of just using a standard that's been around for decades?