3 ms·
Any process that can connect to the X server has complete control over all other apps running on it and can record all user activity. It can also pop up an xte
by tinus_hn 5y ago
Any process that can connect to the X server has complete control over all other apps running on it and can record all user activity.
It can also pop up an xterm and type ‘kill’ into it.
Not that this isn’t poor design though, but it’s the best one can do.
- throwawaysysd 5y agoNo I mentioned two ways it could be done better, it has to use different OS facilities. Of course you are right about the futility of trying to secure anything connected to the X server, a solution based on X11 will probably always have vulnerabilities.