News for hackers. Stuff that matters.
Re:The death watch for the X Window System has probably started by xorcist on Sunday July 07, 2019 @03:18PM (#20377156)
The CADT development model is very real, but it's not really a good description of the Xorg situation. The most active Wayland developers are not only also Xorg developers but have been so for a very long time. They know their history.

X11 has some fundamental problems. It's not fun using a modern desktop where it is impossible to sandbox individual applications. Firefox frequently processes untrusted data and is run with a dedicated uid, but it is also an interactive application and can suddenly listen in on all my passwords entered in other applications. Virtualized appliations are referred to using dumber protocols like VNC and SPICE which isn't always ideal.

Wayland has some interesting design issues on its own but that doesn't make the developers ignorant. XWayland will stick around for the foreseeable future.

Re:The death watch for the X Window System has probably started by altfredd on Sunday July 07, 2019 @08:59PM (#20379102)
> The most active Wayland developers are not only also Xorg developers but have been so for a very long time

Amusingly, I often hear this argument from Wayland proponents. Do they realize, that those very same developers have failed at maintaining Xorg code base and fixing it's bugs in backward compatible way?

To run a project into the ground and wash one's hands of it... is not worthy of endorsement.

Re:The death watch for the X Window System has probably started by xorcist on Monday July 08, 2019 @05:08AM (#20381116)
It's important to know that there were once many implementations of X11. Xorg is the only one that hasn't failed. Everything else is unmaintained now.

This may be a matter of different perspective, but from my point of view the Xorg maintainers did a monumental work modularizing and cleaning up the codebase. They kept integrating modern extensions and have kept X11 relevant all this time. Try something pre-Xorg to compare.

Re:The death watch for the X Window System has probably started by danShumway on Sunday July 07, 2019 @09:33PM (#20379257)
> To run a project into the ground and wash one's hands of it... is not worthy of endorsement.

But to run a project into the ground and not wash one's hands of it is an even worse endorsement.

You might not trust the Xorg devs to develop you a new window system, but at least you'd trust them to know if their own, existing code has fundamental problems.

Re:The death watch for the X Window System has probably started by posix_me_less on Monday July 08, 2019 @07:54AM (#20381934)
You can (kind of) sandbox Firefox with X11 today. Just run it as untrusted X11 client with privileges of untrusted uid. Downsides:

* this does not always work for other programs, and for Firefox you need to turn off bell events in about:config to avoid random crashes;

* (this may be upside depending on what your expectations are) X clipboard is still shared in the host->client direction.

Re:The death watch for the X Window System has probably started by southerndrift on Sunday July 07, 2019 @05:09PM (#20377869)
Can't you use ssh and connect to localhost with the -Y option to sandbox an X app?
Re:The death watch for the X Window System has probably started by tlb on Sunday July 07, 2019 @05:19PM (#20377932)
No. An X11 connection forwarded with -Y can receive all keyboard events, capture all screen pixels, inject mouse/keyboard events and read/write the clipboard. A malicious X11 client app can totally pwn you, forwarded or not.
Re:The death watch for the X Window System has probably started by aswellian on Monday July 08, 2019 @12:46AM (#20379967)
A bit more involved, but seems to achieve the desired result: https://www.dragonflybsd.org/docs/handbook/RunSecureBrowser/
Re:The death watch for the X Window System has probably started by ubercow13 on Monday July 08, 2019 @02:42AM (#20380415)
Does Windows not have those same fundamental problems?