News for hackers. Stuff that matters.
Re:The death watch for the X Window System has probably started by soulofmischief on Sunday July 07, 2019 @03:46PM (#20377335)
X does suck, it's incredibly insecure and the workarounds for regaining some sense of application isolation are obtuse and resource-draining. I could go into all the little technical details but the fact is, X has been around for decades and its core was made for much simpler machines.

It's time for something new. This isn't attention-deficit developers at play. People have spent a lot of time on the Wayland ecosystem. This isn't just some kids hacking away in their basements ignorant of better development practices.

You argument holds up for many Linux components, but not for X/Wayland. It's preposterous to take the stance that no component in the entire Linux ecosystem ever needs to be replaced.

Re:The death watch for the X Window System has probably started by noobermin on Sunday July 07, 2019 @06:17PM (#20378331)
Is a complete rewrite needed? Can't you break and fix the parts that make application isolation impossible but keep everything else?
Re:The death watch for the X Window System has probably started by soulofmischief on Monday July 08, 2019 @09:41AM (#20382598)
X is very interdependent, and a lot of it isn't fully modularized. When you need to change the entire foundation, knocking down a few walls won't get you there.

It sucks, I know. Decades of hard work "gone". But think of it this way, isn't it often said you shouldn't be afraid to throw away old prototype code? X is a decades-long foray into graphical computing, but perhaps it's time to throw away the prototype and start over with what we've learned from the process.

Re:The death watch for the X Window System has probably started by sprash on Sunday July 07, 2019 @04:15PM (#20377525)
> it's incredibly insecure

I hear this all the time. But so far there was not even one incident where major hack was done via X11.

The reason for that is that people who use X also exclusively use trusted apps. The Wayland security model makes many generic tasks insanely complicated. The real world security gains will be zero. Security through obscurity never worked.

Re:The death watch for the X Window System has probably started by brohee on Sunday July 07, 2019 @04:33PM (#20377655)
You only have to ssh to a compromised machine with X11 forwarding enabled to be quite exposed...
Re:The death watch for the X Window System has probably started by soulofmischief on Monday July 08, 2019 @09:38AM (#20382581)
Poison a single common open-source daemon which is used in a lot of systems; That daemon will have access to all keystrokes, window content, etc.

> The reason for that is that people who use X also exclusively use trusted apps.

Well that's just not true. What does trusted mean? Most of the software on our desktops is unaudited. We don't have insight into the entire chain of deployment for more than a handful of applications we feel like keeping up with.

On a side note, that would be a wonderful service; A man-like utility which simply displays change-logs coupled with relevant source-code diffs. Reduces the surface of trust down to one party. Something like that would require financial backing, however.