News for hackers. Stuff that matters.

A comment on The death watch for the X Window System has probably started. Parent comment

Re:The death watch for the X Window System has probably started by southerndrift on Sunday July 07, 2019 @05:09PM (#20377869)
Can't you use ssh and connect to localhost with the -Y option to sandbox an X app?
[ Parent | on HN ]
Re:The death watch for the X Window System has probably started by tlb on Sunday July 07, 2019 @05:19PM (#20377932)
No. An X11 connection forwarded with -Y can receive all keyboard events, capture all screen pixels, inject mouse/keyboard events and read/write the clipboard. A malicious X11 client app can totally pwn you, forwarded or not.
[ Parent | on HN ]
Re:The death watch for the X Window System has probably started by aswellian on Monday July 08, 2019 @12:46AM (#20379967)
A bit more involved, but seems to achieve the desired result: https://www.dragonflybsd.org/docs/handbook/RunSecureBrowser/
[ Parent | on HN ]