7 ms·

> Security? My whole $HOME is readable and writeable to just about any application I run; using Wayland is like locking my windows but leaving my front door wid

> Security? My whole $HOME is readable and writeable to just about any application I run; using Wayland is like locking my windows but leaving my front door wide open. Exactly. Like, holy moly did the people working on Wayland get carried away by the mobile OS world. And second system syndrome too probably. I'm using $DISTRO because I trust them enough to not package spyware/malware in their repos. I know it's not 100% safe, there have been and will be security bugs that don't get fixed in a timely manner, or even ones that got introduced by distro-specific patches in the first place, but holy hell my OSS desktop is not a proprietary smartphone OS loaded with random closed-source apps from god knows who that tries to steal my data for profit. If I get pwned then it's certainly not through my display server. I mean, eventually, like always, the open source world will get its shit together, and Wayland will probably become usable, but we only recently kinda solved the whole screen recording issue. A few weeks ago I wanted to have a simple script, that would quickly switch between a couple display configurations. With X11 that was dead simple by using xrandr. It works with every DE/WM on this planet. You'd assume there's an equivalent tool for Wayland. But mumble mumble security, you cannot do that, so we got the same f#+ing situation as with screen recording again, every WM/compositor comes up with their own solution to something absolutely trivial. GNOME/Mutter have a dbus-API, wlroots-based ones have "wlrandr" via some protocol extension, KWIN I didn't even bother checking. But it's only 15 years since the project started right, why should something trivial as this have been settled upon yet? I even stumbled upon a discussion in an issue tracker that I cannot find just now where Wayland devs argued that you don't even want something like that. Like, go working for Apple with that mindset. Give it another 10 years, and it might be ready to serve more than the absolutely trivial average Joe use-case.

Crysstalis 4y ago
>And second system syndrome too probably In my opinion, Wayland has avoided this by deliberately being simpler than X11. > I'm using $DISTRO because I trust them enough to not package spyware/malware in their repos >but holy hell my OSS desktop is not a proprietary smartphone OS loaded with random closed-source apps from god knows who that tries to steal my data for profit I think it is not reasonable for you to ask them to never plan for a day when that could happen, if that is what you are suggesting anyway. >You'd assume there's an equivalent tool for Wayland Not if you were aware of the current issues with Xrandr and why it is a poor target. >But mumble mumble security, you cannot do that, so we got the same f#+ing situation as with screen recording again, every WM/compositor comes up with their own solution to something absolutely trivial. GNOME/Mutter have a dbus-API, wlroots-based ones have "wlrandr" via some protocol extension, KWIN I didn't even bother checking. But it's only 15 years since the project started right, why should something trivial as this have been settled upon yet? It is absolutely not trivial, and there are security/usability issues with it. To do this "the right way" would be more or less duplicating the entire KMS API into every implementation. Even XRandr is still missing features compared to that, so it is not an adequate solution either.
- zozbot234 4y ago
  > In my opinion, Wayland has avoided this by deliberately being simpler than X11. Wayland is not really simpler than X11 unfortunately. The core protocols are very poorly documented, and a lot of practically important stuff is left to be implemented in unspecified ways by the compositor. Like a lot of freedesktop.org stuff historically, it's hard to tell what's prototype-quality from what's actually ready for daily-driver production use.
  - Crysstalis 4y ago
    >Wayland is not really simpler than X11 unfortunately. I would say it is. All the things you said are also true of X11 and are worse there, which is another reason why it has been so impractical to develop additional X11 servers, and why everybody always just used X.org despite its shortcomings. And by the way, freedesktop.org has for the most part merged with X.org now. It is the same group of people doing the same work.
  - seba_dos1 4y ago
    > The core protocols are very poorly documented, Any examples? I found it much easier to grasp than X11. I have worked on libraries that have both X11 and Wayland backends and X11 code was always an impenetrable pile of workarounds that could break from looking at it, while Wayland code was usually relatively simple and easy to understand.
- fps_doug 4y ago
  > I think it is not reasonable for you to ask them to never plan for a day when that could happen, if that is what you are suggesting anyway. Then plan for it, architecturally, so that you can add or enable these features later on, or when you need it. Start with something sensible, appropriate for real-world usage. Wayland was everything but. With X11 the ship has sailed in that regard, but if you start over, don't create something that doesn't even offer these features in the name of security and then let the community come up with 10 different solutions to the same problems in the most uncoordinated way possible. > Not if you were aware of the current issues with Xrandr and why it is a poor target. xrandr works exactly fine for setting up your screens. You can pass resolution, refresh rate, position and orientation via command line in a simple and understandable way. It's a great example for a trivial real-world tool that should just exist. > It is absolutely not trivial, and there are security/usability issues with it. To do this "the right way" would be more or less duplicating the entire KMS API into every implementation. Even XRandr is still missing features compared to that, so it is not an adequate solution either. This completely confirms second system syndrome. It's only as complicated and non-trivial as you want it to be. I can only imagine what kind of convoluted security nonsense you think of when you say "the right way". Ask the display server for a list of screens and supported resolutions, and then tell it what you want to do with those. Done. X11 does it, Windows does it, macOS does it.
kaba0 4y ago
> Exactly. Like, holy moly did the people working on Wayland get carried away by the mobile OS world. So we should settle for windows that can’t be locked for yet another 3-4 decades? Noone claims wayland will secure completely unrelated parts of the stack , but it is a start that is must have.

Crysstalis 4y ago

>And second system syndrome too probably In my opinion, Wayland has avoided this by deliberately being simpler than X11. > I'm using $DISTRO because I trust them enough to not package spyware/malware in their repos >but holy hell my OSS desktop is not a proprietary smartphone OS loaded with random closed-source apps from god knows who that tries to steal my data for profit I think it is not reasonable for you to ask them to never plan for a day when that could happen, if that is what you are suggesting anyway. >You'd assume there's an equivalent tool for Wayland Not if you were aware of the current issues with Xrandr and why it is a poor target. >But mumble mumble security, you cannot do that, so we got the same f#+ing situation as with screen recording again, every WM/compositor comes up with their own solution to something absolutely trivial. GNOME/Mutter have a dbus-API, wlroots-based ones have "wlrandr" via some protocol extension, KWIN I didn't even bother checking. But it's only 15 years since the project started right, why should something trivial as this have been settled upon yet? It is absolutely not trivial, and there are security/usability issues with it. To do this "the right way" would be more or less duplicating the entire KMS API into every implementation. Even XRandr is still missing features compared to that, so it is not an adequate solution either.

zozbot234 4y ago
> In my opinion, Wayland has avoided this by deliberately being simpler than X11. Wayland is not really simpler than X11 unfortunately. The core protocols are very poorly documented, and a lot of practically important stuff is left to be implemented in unspecified ways by the compositor. Like a lot of freedesktop.org stuff historically, it's hard to tell what's prototype-quality from what's actually ready for daily-driver production use.
- Crysstalis 4y ago
  >Wayland is not really simpler than X11 unfortunately. I would say it is. All the things you said are also true of X11 and are worse there, which is another reason why it has been so impractical to develop additional X11 servers, and why everybody always just used X.org despite its shortcomings. And by the way, freedesktop.org has for the most part merged with X.org now. It is the same group of people doing the same work.
- seba_dos1 4y ago
  > The core protocols are very poorly documented, Any examples? I found it much easier to grasp than X11. I have worked on libraries that have both X11 and Wayland backends and X11 code was always an impenetrable pile of workarounds that could break from looking at it, while Wayland code was usually relatively simple and easy to understand.
fps_doug 4y ago
> I think it is not reasonable for you to ask them to never plan for a day when that could happen, if that is what you are suggesting anyway. Then plan for it, architecturally, so that you can add or enable these features later on, or when you need it. Start with something sensible, appropriate for real-world usage. Wayland was everything but. With X11 the ship has sailed in that regard, but if you start over, don't create something that doesn't even offer these features in the name of security and then let the community come up with 10 different solutions to the same problems in the most uncoordinated way possible. > Not if you were aware of the current issues with Xrandr and why it is a poor target. xrandr works exactly fine for setting up your screens. You can pass resolution, refresh rate, position and orientation via command line in a simple and understandable way. It's a great example for a trivial real-world tool that should just exist. > It is absolutely not trivial, and there are security/usability issues with it. To do this "the right way" would be more or less duplicating the entire KMS API into every implementation. Even XRandr is still missing features compared to that, so it is not an adequate solution either. This completely confirms second system syndrome. It's only as complicated and non-trivial as you want it to be. I can only imagine what kind of convoluted security nonsense you think of when you say "the right way". Ask the display server for a list of screens and supported resolutions, and then tell it what you want to do with those. Done. X11 does it, Windows does it, macOS does it.

kaba0 4y ago

> Exactly. Like, holy moly did the people working on Wayland get carried away by the mobile OS world. So we should settle for windows that can’t be locked for yet another 3-4 decades? Noone claims wayland will secure completely unrelated parts of the stack , but it is a start that is must have.