Is root unsecure ? Is ACCA useful ?

folak@lemmy.world to Android@lemmy.world – 43 points –

Hi, I'm wondering myself is root useful or not ? In which case it can be useful ? And Root with magisk is unsecure ?

32

You are viewing a single comment

No, it's like saying having admin permissions is one of the most dangerous things you can do on your home computer. Only an idiot would think that.

I mean, it is, if you don't have admin you can't install root-level malware directly (still can if the malware uses some bug to gain privilege). But I still fully agree with your point, I just wanted to say that technically, having root is dangerous in the sense that you can do anything. Most end users have no reason to modify system files etc. Since they only use a web browser and word.

Notably, there is a difference between admin and root.

One has checks, the other can run scripts, change permissions, move files, delete files, hide malware, install rootkits, install ransomware, exfiltrate data, alter your OS, change hardware voltages, etc all without so much as a prompt.

It doesn't matter if you're a beginner or a seasoned veteran with handling root, it can cause some heavy damage to your system when you or another application mishandle it.

Rule of thumb is to remain in user mode for the entirety of your sessions. Only use admin rights when you need to make a system change. Most well-designed applications should not need to be run as admin, and definitely not root.

What is this proselytization adding, here?

Its called the principle of least privilege, or principle of minimal privilege, or principle of least authority.

Its a philosophy learned by anyone who is serious about information assurance. Its a very basic, yet fundamental security concept.

Got it. I thought it wasn't relevant to this context, and I was right.

This is relevant to giving apps "root access". How is that not relevant?

Lol you're not getting those admin permissions by flipping a simple switch. Root access is far more involved than simple admin permissions so please try again.

It can't be much more complicated than basic reading comprehension, but that's clearly beyond you.

Lots of insults. Clearly you're a person of the people, you must work wonders when changing minds. 🤯

10 more...