News for hackers. Stuff that matters.

A comment on X.org Security Advisory: multiple security issues X.Org X server and Xwayland. Parent comment

Re:X.org Security Advisory: multiple security issues X.Org X... by exasperaited on Sunday November 02, 2025 @01:49PM (#45792450)
> Bonus points if you have any Tcl/Tk apps running, where you can simply transmit commands for the program to run via the X server.

Back in 1996 the level of X integration in Tk was awesome; I had a shell tool that could make Netscape do stuff by firing MIT magic cookies at it.

In a contemporary setting, it's pretty horrifying.

[ Parent | on HN ]
Re:X.org Security Advisory: multiple security issues X.Org X... by ptx on Sunday November 02, 2025 @08:20PM (#45794999)
Didn't Netscape use Motif?
[ Parent | on HN ]
Re:X.org Security Advisory: multiple security issues X.Org X... by exasperaited on Sunday November 02, 2025 @08:34PM (#45795063)
It did, but it could receive messages thanks to MIT Magic Cookies, which you could send because of Tk’s excellent integration with X. I can’t remember now if it was the browser you could also effectively spy on via similar means. Long time ago. I have largely forgotten how my tool worked now but the code I wrote (modified wish shell) might still be out there.
[ Parent | on HN ]