logoalt Hacker News

yjftsjthsd-htoday at 3:36 AM0 repliesview on HN

If it runs as your user and can only log in as you, then I wouldn't expect it to be able to become root. But if it can log you in as different users, I would expect that 1. it needs to run from root, and 2. it can log in as root.