X.org Hit by New Security Vulnerabilities – Two Date Back to 1988 with X11R2

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by darthoctopus on Wednesday October 04, 2023 @12:55AM (#37760998)

Not OP, but right now my biggest unfulfilled use cases are:

- global keybindings (e.g. I would like variations on super+space with extra modifiers to trigger different behaviours in an application launcher, Kupfer)

- remote control (x2x) --- I use this for essentially seamless kvm between different machines driving adjacent monitors

- I have no choice but to use Zoom screen sharing for work

[ Parent | on HN ]

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by KingMachiavelli on Wednesday October 04, 2023 @03:06AM (#37761799)

1. How did you do that with X11? I can't quite remember but I think the solution is wayland-compistor specific...

2. Check out Waypipe, it works really well and supports all application types unlike X11 forwarding. It's more like VNC but easy.

3. Last I checked Zoom screen sharing does work via the browser. The only feature I remember missing was screen control. Same experience with MS Teams too.

[ Parent | on HN ]

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by xcdzvyn on Wednesday October 04, 2023 @10:24AM (#37765674)

(1) is done by just listening for input events. Any program can, globally. I believe in Wayland it's application-specific?

[ Parent | on HN ]

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by arp242 on Wednesday October 04, 2023 @05:06PM (#37771805)

Yeah, in X anyone can write a keylogger. Or do something really useful with it :-)

(Personally I don't think this is a problem: if the attacker can run programs it's game-over already; just replace "su", "sudo", "firefox", or whatnot with your wrapper script which logs stuff, add ~/.local/bin to PATH by frobbing with shell rc, and presto)

[ Parent | on HN ]

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by loa_in_ on Wednesday October 04, 2023 @03:06AM (#37761802)

I'm running Wayland and do all that. Fedora with compiz. NoMachine/AdminHands/KDEConnect for remote control

[ Parent | on HN ]

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by a-french-anon on Wednesday October 04, 2023 @08:05AM (#37763951)

There's https://github.com/waycrate/swhkd now. Didn't test it, but sxhkd is also an important part of my workflow.

Still missing bspwm, lemonbar and dmenu (bmenu/fuzzel, maybe). For those who care, Steam is also a pain point, from what I've heard.

[ Parent | on HN ]

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by bravetraveler on Wednesday October 04, 2023 @01:55PM (#37769065)

Steam is indeed still not on Wayland, but generally speaking, it's worked well for me... It runs under XWayland which is 'fine'

Games may find some benefit from gamescope: https://wiki.archlinux.org/title/Gamescope

[ Parent | on HN ]