How to Enable Touch ID Authentication for sudo Commands on macOS

·1 views

Mac users can configure Touch ID to replace password prompts when running sudo commands in the Terminal. On macOS 14 Sonoma and later, this involves copying a built-in template file at /etc/pam.d/sudo_local.template and uncommenting a single line to activate the pam_tid.so module. Users on macOS 13 Ventura or earlier must manually add the same line to the /etc/pam.d/sudo file, though this change gets overwritten with each system update. A third-party command-line tool called mole, installable via Homebrew, can automate the configuration process on either macOS version. Once set up, a Touch ID fingerprint prompt replaces the password dialog whenever sudo is invoked in a new Terminal session.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer audits 2 months of Claude Code sessions, finds $1,675 in API costs and 117 risky deletes

A developer building an AI safety tool called Paveo replayed 59 days of their own Claude Code sessions to stress-test the product before releasing it publicly. Across 106 sessions and over 8,000 model calls, the usage would have cost $1,674.75 at standard API rates, with one single session reaching $452.92. A starter safety policy, when applied retroactively to all tool calls, would have blocked 670 actions, including 117 recursive force-delete commands and 3 forced git cleans. The developer notes that not every blocked command would have been a genuine mistake, but argues that a false refusal is preferable to an unrecoverable data loss. Paveo, which runs locally without any network access and supports multiple AI coding tools, is set to become publicly available this week.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Strong Coding Fundamentals Matter More Than AI Prompting Skills, Developer Argues

A developer named Cesar Aguirre published a career-focused article on DEV Community on September 28, addressing anxiety around artificial intelligence in the tech industry. The piece targets programmers experiencing 'FOMO' — fear of missing out — over the rapid rise of AI tools. Aguirre argues that solid programming fundamentals provide more lasting value than simply learning to craft AI prompts. His central message is that chasing AI hype is less effective than building timeless core skills as a developer.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Build a Desync-Free Next.js Shop Inside Telegram Mini Apps

Developers building e-commerce experiences inside Telegram Mini Apps using Next.js frequently encounter state desynchronization, iOS viewport bugs, and client-side security vulnerabilities. The core issue arises when React state updates are not properly synced with Telegram's native MainButton, a global SDK element, causing stale cart data or duplicate transactions. A secure checkout flow requires routing invoice generation through a Next.js Route Handler that validates Telegram's initData server-side, preventing bot token exposure. iOS WebView also mishandles viewport height when the keyboard appears or the MainButton toggles, pushing UI elements off-screen. A React Context Provider wrapping the Telegram WebApp SDK helps manage SSR compatibility and ensures the SDK is safely initialized only on the client side.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Asynclay Offers Lightweight HTTP-Based Job Scheduling Without Redis or Workers

A developer has built Asynclay, a tool designed to simplify delayed task execution for backend applications by reducing the need for complex queue infrastructure like Redis and dedicated workers. The system works by accepting a target URL, payload, and optional execution time, then independently persisting, executing, and retrying the job. It uses PostgreSQL's FOR UPDATE SKIP LOCKED mechanism to safely distribute work across multiple instances, and employs lease-based job locking to handle worker failures mid-execution. Delivery is guaranteed on an at-least-once basis, with stable job identifiers provided to target endpoints to support idempotency. The project is now seeking developer feedback, particularly on scenarios where this HTTP-centric scheduling model may fall short or raise trust concerns around external background execution.

0 comments Read more at DEV Community