6 ms·
If you put a nice lock on your door and leave your window open, then a crook can still get in. Wayland is a nice lock. This "keylogger" depends on having arbitr
by ddevault 6y ago
If you put a nice lock on your door and leave your window open, then a crook can still get in. Wayland is a nice lock. This "keylogger" depends on having arbitrary code execution as your user, outside of a sandbox. The same technique could be applied to backdoor literally anything. In other words, it requires being on the other side of an airtight hatch.
https://devblogs.microsoft.com/oldnewthing/20200318-00/?p=103569 https://devblogs.microsoft.com/oldnewthing/20200318-00/?p=10...
Wayland does not allow programs to use the Wayland protocol to snoop on other programs. X11 does allow this. That's the key distinction. Wayland does nothing to prevent programs from snooping on each other using any of the other features of your operating system. Wayland is only one part of a secure system.
I wish we'd stop having this fucking keylogging discussion already.