3 ms·
I'm really not understanding how npm security is related to wayland security. Do you mean sending everything through dbus in plain text format? Yes, wayland wet
by nurettin 3y ago
I'm really not understanding how npm security is related to wayland security. Do you mean sending everything through dbus in plain text format? Yes, wayland wet the bed on that one.
If npm is the only thing you know and want to talk about, and you have no idea what the security weaknesses introduced by wayland or xorg are, maybe do it in another thread?
- kaba0 3y agoNpm is a random executable that happens to be common. It can run arbitrary code and linux userspace is basically beyond useless in securing anything meaningful about itself. That Documents/FamilyPhotos album? Completely read-writable, I can just send the whole content to any IP address. One might say that you can run it in firejail or so, but noone does it. But here comes the graphics-related problem: even with firejail, any X program has basically unrestricted access to your whole screen and every key event without any form of security. This is basically unsolvable without nesting x sessions, or.. throwing away the whole of X and starting afresh with better primitives, a la wayland.
- nurettin 3y agoYes that's all well and good, but What "security primitives" in wayland are you even typing about? The main author basically admits in every forum and discussion that there is nothing to do if your system is compromised.