News for hackers. Stuff that matters.

A comment on X.org Hit by New Security Vulnerabilities – Two Date Back to 1988 with X11R2. Parent comment

Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by KingMachiavelli on Wednesday October 04, 2023 @03:06AM (#37761799)
1. How did you do that with X11? I can't quite remember but I think the solution is wayland-compistor specific...

2. Check out Waypipe, it works really well and supports all application types unlike X11 forwarding. It's more like VNC but easy.

3. Last I checked Zoom screen sharing does work via the browser. The only feature I remember missing was screen control. Same experience with MS Teams too.

[ Parent | on HN ]
Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by xcdzvyn on Wednesday October 04, 2023 @10:24AM (#37765674)
(1) is done by just listening for input events. Any program can, globally. I believe in Wayland it's application-specific?
[ Parent | on HN ]
Re:X.org Hit by New Security Vulnerabilities – Two Date Back... by arp242 on Wednesday October 04, 2023 @05:06PM (#37771805)
Yeah, in X anyone can write a keylogger. Or do something really useful with it :-)

(Personally I don't think this is a problem: if the attacker can run programs it's game-over already; just replace "su", "sudo", "firefox", or whatnot with your wrapper script which logs stuff, add ~/.local/bin to PATH by frobbing with shell rc, and presto)

[ Parent | on HN ]