Should people reflexively refuse prompts to authenticate as admin and see if the underlying programs still work as expected? This comes up all the time for Macs and the keychain
back
1 comments
Instead of "authenticate as admin" the prompt should contains specific privileges required by a program, for example:
- read .ssh directory
- write to .ssh directory
- read motherboard serial number
And so on. Accessing the keychain should require confirmation if one program wants to read other program's secrets. If it wants only its own secrets, then no prompt needed.