4 ms·

What? Why is this a reply to my comment?

• kaba0 4y ago
  I think it is quite obvious why I replied - I listed several potential ways your computer could be vulnerable.
  • cxr 4y ago
    Well, it wasn't obvious—hence the question. And it's still not obvious, even now. What does a "list of several potential ways your computer could be vulnerable"* have to do, specifically, with my comment? Where is the logical throughline? Do you understand my comment to contain an assertion that my computer is not vulnerable if I were to run an "npm install script adding a few lines to your bashrc"? (It doesn't. That's the entire basis for my remark that I'm far more concerned about things like that than the threat of programs monitoring/faking IO among GUI-based apps.) * ... which, to be clear, is not what your comment actually contains—it was rather a series of questions in non-sequitur
    • kaba0 4y ago
      > It doesn't. That's the entire basis for my remark that I'm far more concerned about things like that than the threat of programs monitoring/faking IO among GUI-based apps... But there is no difference between a strictly CLI app and a GUI one. Even if you ran everything in a sandbox, under X they could still do every nefarious thing. It would be like sealing one hole of a broken bucket, while water will still leak out on the other ones. Without GUI sandboxing we can’t even start fixing the security question on Linux desktop.
      • cxr 4y ago
        > It would be like sealing one hole of a broken bucket, while water will still leak out on the other ones. I think you've stumbled upon my point without realizing it...