Re:The X.Org Server Is Abandonware?
by p_l on Sunday October 25, 2020 @08:34AM
(#24885835)
Due to how XWayland works, a lot of applications (sometimes critical ones) won't work under XWayland ever (pretty much everything that works on interaction between X clients fails hard).
[ Parent
| on HN ]
>> pretty much everything that works on interaction between X clients fails hard
It's supposed to fail hard. That isnt just a security hole in X, it's a total lack of security. The notion that any app should be able to monitor or manipulate any other app is archaic and wrong from a security perspective.
Maybe it's archaic and wrong to you. Maybe it's even a good idea to be able to configure this on a per-application basis. What isn't the case is that you get to know what is convenient and right in my workflow.
Fair point. I think not allowing by default and having some means to grant permission is a decent idea, but implementation has to be right so people dont develop a habit of allowing it every time they're asked.
There they go htop, netcat, kill, and the whole unix pipe system. No, thanks. Programs monitoring other programs is the very essence of computing for us greybeards, and you will take this from our cold, dead hands!
> That isnt just a security hole in X, it's a total lack of security.
That "security" is useless on a Desktop where you run all programs as the same user. If you want a platform to run locked down "apps" that's fine, just don't expect others to be happy with the cost of that "security" when it provides no benefit for them.