27 ms·

xdg-desktop-* just goes 100% cpu. It's the first process I kill after booting Fedora. I'd appreciate if xorg folks implemented whatever hippie nonsense millenni

xdg-desktop-* just goes 100% cpu. It's the first process I kill after booting Fedora. I'd appreciate if xorg folks implemented whatever hippie nonsense millennials want so that we can go back to 20 years ago when everything worked fine.

ebiester 3y ago
I don’t remember everything working fine in 2003. I remember it being a cluster, especially with audio.
- nurettin 3y ago
  Hmmm 2003 was pretty good for me. (or was it 2002?) I was one of the first people who did a wget on the Fedora 1.0 iso download link on freenode/#fedora xmms worked fine after installing.
kaba0 3y ago
Hippie nonsense like an npm install not installing any keylogger with arbitrary internet access without even trying? Or multiple screens with different resolutions?
- nurettin 3y ago
  I've had multiple screens with different resolutions in xorg since 2008 (one laptop, one monitor setup). How is npm even related? Are you just generating responses?
  - kaba0 3y ago
    What kind of security does your typical linux desktop has? I help you, basically none. Something as “benign” as an npm install could do basically anything on your computer, besides installing a video card driver (as per the old xkcd, but nothing improved since). At least wayland took a new approach that is not as naive as the previous millenium’s stance on security.
    - nurettin 3y ago
      I'm really not understanding how npm security is related to wayland security. Do you mean sending everything through dbus in plain text format? Yes, wayland wet the bed on that one. If npm is the only thing you know and want to talk about, and you have no idea what the security weaknesses introduced by wayland or xorg are, maybe do it in another thread?
      - kaba0 3y ago
        Npm is a random executable that happens to be common. It can run arbitrary code and linux userspace is basically beyond useless in securing anything meaningful about itself. That Documents/FamilyPhotos album? Completely read-writable, I can just send the whole content to any IP address. One might say that you can run it in firejail or so, but noone does it. But here comes the graphics-related problem: even with firejail, any X program has basically unrestricted access to your whole screen and every key event without any form of security. This is basically unsolvable without nesting x sessions, or.. throwing away the whole of X and starting afresh with better primitives, a la wayland.
        nurettin 3y ago
        Yes that's all well and good, but What "security primitives" in wayland are you even typing about? The main author basically admits in every forum and discussion that there is nothing to do if your system is compromised.

ebiester 3y ago

I don’t remember everything working fine in 2003. I remember it being a cluster, especially with audio.

nurettin 3y ago
Hmmm 2003 was pretty good for me. (or was it 2002?) I was one of the first people who did a wget on the Fedora 1.0 iso download link on freenode/#fedora xmms worked fine after installing.

kaba0 3y ago

Hippie nonsense like an npm install not installing any keylogger with arbitrary internet access without even trying? Or multiple screens with different resolutions?

nurettin 3y ago
I've had multiple screens with different resolutions in xorg since 2008 (one laptop, one monitor setup). How is npm even related? Are you just generating responses?
- kaba0 3y ago
  What kind of security does your typical linux desktop has? I help you, basically none. Something as “benign” as an npm install could do basically anything on your computer, besides installing a video card driver (as per the old xkcd, but nothing improved since). At least wayland took a new approach that is not as naive as the previous millenium’s stance on security.
  - nurettin 3y ago
    I'm really not understanding how npm security is related to wayland security. Do you mean sending everything through dbus in plain text format? Yes, wayland wet the bed on that one. If npm is the only thing you know and want to talk about, and you have no idea what the security weaknesses introduced by wayland or xorg are, maybe do it in another thread?
    - kaba0 3y ago
      Npm is a random executable that happens to be common. It can run arbitrary code and linux userspace is basically beyond useless in securing anything meaningful about itself. That Documents/FamilyPhotos album? Completely read-writable, I can just send the whole content to any IP address. One might say that you can run it in firejail or so, but noone does it. But here comes the graphics-related problem: even with firejail, any X program has basically unrestricted access to your whole screen and every key event without any form of security. This is basically unsolvable without nesting x sessions, or.. throwing away the whole of X and starting afresh with better primitives, a la wayland.
      - nurettin 3y ago
        Yes that's all well and good, but What "security primitives" in wayland are you even typing about? The main author basically admits in every forum and discussion that there is nothing to do if your system is compromised.