3 ms·

General purpose Linux distributions whether using Wayland or X don't meaningfully protect you from compromised software running on your system. Traditionally on

General purpose Linux distributions whether using Wayland or X don't meaningfully protect you from compromised software running on your system. Traditionally on all systems 99.9% of the game has always been and remains not installing malware or compromising your data or credentials. This means 99.9% of actual threats to your security remain the same. If you want actual isolation you need to run something like qubes which ironically actuality uses X

Gigachad 3y ago
Wayland is simply one piece in the puzzle. Flatpak, PipeWire, etc are the fixing the other parts. Things are very slowly moving in the right direction though. Unfortunately most linux distros and users do not take security seriously unless it's in a server environment. Desktop linux is awfully far behind systems like MacOS.
charcircuit 3y ago
>Traditionally on all systems 99.9% of the game has always been and remains not installing malware or compromising your data or credentials. This is a doomer mindset that ignores the advances the rest of the industry has been making. There is a big difference from malware having to find a 0day in order to cause harm to the user and malware developers being able to do exactly what they want without even a permission dialog box showing up.
- michaelmrose 3y ago
  It's a practical mindset concerned with actual not hypothetical risks and actual not hypothetical costs and benefits.
Someone 3y ago
> Traditionally on all systems 99.9% of the game has always been and remains not installing malware or compromising your data or credentials I won’t debate whether that’s true (it probably is, given that “not compromising your data or credentials” is close to a tautology “if you don’t let your stuff get stolen, it won’t get stolen”), but focus on > This means 99.9% of actual threats to your security remain the same. I don’t see how that follows because we’re not living in “traditionally” anymore. IMHO, if iOS and Android had run “traditional X Windows”, the number of successful over the air attacks would be way higher or nobody would use smartphones out of fear of getting hacked.

Gigachad 3y ago

Wayland is simply one piece in the puzzle. Flatpak, PipeWire, etc are the fixing the other parts. Things are very slowly moving in the right direction though. Unfortunately most linux distros and users do not take security seriously unless it's in a server environment. Desktop linux is awfully far behind systems like MacOS.

charcircuit 3y ago

>Traditionally on all systems 99.9% of the game has always been and remains not installing malware or compromising your data or credentials. This is a doomer mindset that ignores the advances the rest of the industry has been making. There is a big difference from malware having to find a 0day in order to cause harm to the user and malware developers being able to do exactly what they want without even a permission dialog box showing up.

michaelmrose 3y ago
It's a practical mindset concerned with actual not hypothetical risks and actual not hypothetical costs and benefits.

Someone 3y ago

> Traditionally on all systems 99.9% of the game has always been and remains not installing malware or compromising your data or credentials I won’t debate whether that’s true (it probably is, given that “not compromising your data or credentials” is close to a tautology “if you don’t let your stuff get stolen, it won’t get stolen”), but focus on > This means 99.9% of actual threats to your security remain the same. I don’t see how that follows because we’re not living in “traditionally” anymore. IMHO, if iOS and Android had run “traditional X Windows”, the number of successful over the air attacks would be way higher or nobody would use smartphones out of fear of getting hacked.