Re:The death watch for the X Window System has probably started
by brohee on Sunday July 07, 2019 @04:33PM
(#20377655)
You only have to ssh to a compromised machine with X11 forwarding enabled to be quite exposed...
Re:The death watch for the X Window System has probably started
by soulofmischief on Monday July 08, 2019 @09:38AM
(#20382581)
Poison a single common open-source daemon which is used in a lot of systems; That daemon will have access to all keystrokes, window content, etc.
> The reason for that is that people who use X also exclusively use trusted apps.
Well that's just not true. What does trusted mean? Most of the software on our desktops is unaudited. We don't have insight into the entire chain of deployment for more than a handful of applications we feel like keeping up with.
On a side note, that would be a wonderful service; A man-like utility which simply displays change-logs coupled with relevant source-code diffs. Reduces the surface of trust down to one party. Something like that would require financial backing, however.
I hear this all the time. But so far there was not even one incident where major hack was done via X11.
The reason for that is that people who use X also exclusively use trusted apps. The Wayland security model makes many generic tasks insanely complicated. The real world security gains will be zero. Security through obscurity never worked.