News for hackers. Stuff that matters.
Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by hactually on Tuesday October 03, 2023 @09:05PM (#37759678)
running wayland here - zero issues. What are you struggling with, I might be able to help?
Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by bravetraveler on Tuesday October 03, 2023 @09:24PM (#37759794)
Ditto, Wayland user for... at least four years now; on Sway, even. Happy to help where I can - I'm very comfortably settled into this new world.

There's a lot of assumption around Wayland handling based on the value of "$DESKTOP_SESSION". This is relevant for xdg portals that make screensharing and the like possible.

In the end it's mainly Electron/Chromium things that may need some launch arguments to truly do Wayland. Anything GTK/Qt has been inherent.

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by hackernudes on Tuesday October 03, 2023 @10:06PM (#37760027)
How about sharing contents of specific windows for webrtc (or OBS)?
Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by bravetraveler on Tuesday October 03, 2023 @10:15PM (#37760083)
I'm a bit naive on things like WebRTC unfortunately. I can share displays... but specific applications, I'm not sure - I don't believe so.

This is with WebEx which I think uses WebRTC; it got funny when I disabled too much fingerprinting [in my browser].

I've managed without specific-app-sharing by using workspaces

OBS worked okay the last I toyed with it, IIRC using Pipewire for the capturing.

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by hactually on Tuesday October 03, 2023 @11:18PM (#37760459)
Can you be more specific - what did you try doing specifically?

OBS works fine from what I've heard but must admit I don't use it myself.

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by hackernudes on Thursday October 05, 2023 @07:37PM (#37785591)
I'm using sway (wlroots + xdg-desktop-portal-wlr). Sharing the whole screen works.

I have tried using chrome (stable and unstable) and OBS. OBS uses pipewire to capture (which I believe in turn talks wayland xdg-desktop-portal). I think chromium works the same way (I have the chrome flag "enable-webrtc-pipewire-capturer" turned on). There doesn't seem to be a way to share a single specific window.

There is so much half-cocked or old information out there it is hard to find the right place to look. At the end of the day I'm not sure if xdg-desktop-portal, wlroots, or pipewire need to be improved.

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by loa_in_ on Wednesday October 04, 2023 @03:07AM (#37761811)
OBS snap package has everything working out of the box on Fedora/Mate with Wayland and Compiz
Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by hackernudes on Thursday October 05, 2023 @07:39PM (#37785601)
Does that use gnome for the wayland compositor? Not sure what you mean by compiz in this context -- I thought that was an X11 window manager. I see wayfire is a "spiritual successor" of compiz based on wlroots.

I am using sway + wlroots + xdg-desktop-portal-wlr on my system.

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by darthoctopus on Wednesday October 04, 2023 @12:55AM (#37760998)
Not OP, but right now my biggest unfulfilled use cases are:

- global keybindings (e.g. I would like variations on super+space with extra modifiers to trigger different behaviours in an application launcher, Kupfer)

- remote control (x2x) --- I use this for essentially seamless kvm between different machines driving adjacent monitors

- I have no choice but to use Zoom screen sharing for work

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by KingMachiavelli on Wednesday October 04, 2023 @03:06AM (#37761799)
1. How did you do that with X11? I can't quite remember but I think the solution is wayland-compistor specific...

2. Check out Waypipe, it works really well and supports all application types unlike X11 forwarding. It's more like VNC but easy.

3. Last I checked Zoom screen sharing does work via the browser. The only feature I remember missing was screen control. Same experience with MS Teams too.

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by xcdzvyn on Wednesday October 04, 2023 @10:24AM (#37765674)
(1) is done by just listening for input events. Any program can, globally. I believe in Wayland it's application-specific?
Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by arp242 on Wednesday October 04, 2023 @05:06PM (#37771805)
Yeah, in X anyone can write a keylogger. Or do something really useful with it :-)

(Personally I don't think this is a problem: if the attacker can run programs it's game-over already; just replace "su", "sudo", "firefox", or whatnot with your wrapper script which logs stuff, add ~/.local/bin to PATH by frobbing with shell rc, and presto)

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by loa_in_ on Wednesday October 04, 2023 @03:06AM (#37761802)
I'm running Wayland and do all that. Fedora with compiz. NoMachine/AdminHands/KDEConnect for remote control
Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by a-french-anon on Wednesday October 04, 2023 @08:05AM (#37763951)
There's https://github.com/waycrate/swhkd now. Didn't test it, but sxhkd is also an important part of my workflow.

Still missing bspwm, lemonbar and dmenu (bmenu/fuzzel, maybe). For those who care, Steam is also a pain point, from what I've heard.

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by bravetraveler on Wednesday October 04, 2023 @01:55PM (#37769065)
Steam is indeed still not on Wayland, but generally speaking, it's worked well for me... It runs under XWayland which is 'fine'

Games may find some benefit from gamescope: https://wiki.archlinux.org/title/Gamescope

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by nonrandomstring on Wednesday October 04, 2023 @03:34AM (#37762021)
Too late returning to this thread, but thanks!

On reflection, almost all of my problems are to do with audio; pipewire, and it's interaction with pulse, alsa, jack and so on - being a 0.1% "pro-audio" user I probably have needs that the average Wayland user doesn't see.

It will get better and I will try again.

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by boudin on Wednesday October 04, 2023 @04:18AM (#37762333)
You can run a wayland session without the pipewire audio stack (pipewire will still be installed, but for the video media sessions).

The pipewire audio stack replaces pulse and jack, it doesn't play well with Jack and Pulse running on the side. It does work well but from what I understand the pro audio use cases, mainly low latency will be a focus for the version 1.0: https://www.phoronix.com/news/PipeWire-1.0-Release-Plan

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by kaba0 on Wednesday October 04, 2023 @05:27AM (#37762810)
What does wayland have to do with audio?
Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by Cheeeetah on Wednesday October 04, 2023 @06:36AM (#37763218)
Screen sharing needs pipewire. My personal experience with pipewire is fine through, just lack good documents, and finding required softwares for screen sharing itself can puzzle quite some people, so far from easy-to-use.
Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by ranguna on Wednesday October 04, 2023 @03:47AM (#37762118)
Doesn't vscodium crash for you 1 out of every 9 times?

Is there a way to streams steam games from a wayland session?

Is it possible to make stacked transparent windows show what is behind them in sway, like we have with i3 and a compositor ?

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by iudqnolq on Wednesday October 04, 2023 @03:55AM (#37762166)
I want to login to my computer over some remote protocol (i.e vnc, rdp), execute "sudo systemctl reboot", wait a little, and log in again.

For this I think I need remote access to a logged out session, which as of my last check is impossible. (It's also poorly supported by gnome on x though)

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by kaba0 on Wednesday October 04, 2023 @05:27AM (#37762803)
If you want to execute something in the terminal, why even bother with a graphical interface? Just ssh in and do it?
Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by iudqnolq on Wednesday October 04, 2023 @05:59AM (#37762983)
The use case here is that I'm in a different physical location to the computer and want to remotely connect and run everything I'm working on on the remote computer in my remote window manager, including a browser and ide and terminal and so on.

Maybe I was too literal. The problem isn't executing the reboot command. The problem is logging in remotely to a computer that hasn't been logged into locally since it booted.

In particular the problem is that if I'm going to be remote for an extended period of time I have to ensure that nothing could interrupt the local session, and there's no fix if it does.

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by kaba0 on Wednesday October 04, 2023 @01:19PM (#37768463)
You can choose to start a session locally though.
Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by balnaphone on Wednesday October 04, 2023 @08:32AM (#37764172)
On-screen keyboards all seem to fail, with "onboard" crashing when you try to type, most others not showing up at all.