Oddbean new post about | logout
 nostr:npub1tmm95lu8a64aqyrcx8ka4wefzaj3hv7kr38hc4p7a7a5xdftak4s2ujf5v sorry, but IPC based elevation, where privileged processes are clearly separated and reasonably isolated is always better than a mess where a process gains privileges and continues running.

I am sure privileges should never be gained, they should only be dropped.