3 ms·

I want to move to the "future", but I use several firefox profiles via xpra in combination with xdotool based hotkeys. The fluidity with which I can control my

I want to move to the "future", but I use several firefox profiles via xpra in combination with xdotool based hotkeys. The fluidity with which I can control my different profile windows without a mouse and with which I can switch between computers with no lag with this setup is a big reason why I have stuck with a Linux desktop, so I am sad to see those super powers go away for no perceived benefit. I have tried Wayland several times now and don't notice any performance differences, just more bugs in Wayland. `xdotool search` seems like it has been deemed a security issue for reasons I can't understand (if someone has hacked in to the point that they can even run such query commands, surely I'm already pwn'd). Maybe I'm oversimplifying it, but to me it's like being upset that someone who broke into your house can see the color of your curtains. The powerful feature set of X far outweighs these minor security concerns. And it looks like xpra is facing huge issues switching over https://github.com/Xpra-org/xpra/issues/387 https://github.com/Xpra-org/xpra/issues/387 :(, I have yet to be as satisfied with any other free remote desktop software (paid nomachine is close but less scriptable). I hope these aren't fundamental limitations of wayland, but the challenges seem steep.

charcircuit 3y ago
>if someone has hacked in to the point that they can even run such query commands, surely I'm already pwn'd Achieving RCE in a single program meaning your entire system is pwned is behind the times compared other operating systems. In order to make freedesktop's security competitive again security restrictions need to be added.
yjftsjthsd-h 3y ago
> if someone has hacked in to the point that they can even run such query commands, surely I'm already pwn'd I believe the idea is that by adding security measures in the graphical server, you can limit it better. So yes, if there's no other protections then the graphical server is the least of your problems, but if you run a program in a container then the graphical server becomes the weakest link so we'd like to protect it. (I don't know why other protections - https://wiki.archlinux.org/title/Firejail#Firejail_with_Xorg https://wiki.archlinux.org/title/Firejail#Firejail_with_Xorg or XACE - weren't good enough, but there is an argument for something there)

charcircuit 3y ago

>if someone has hacked in to the point that they can even run such query commands, surely I'm already pwn'd Achieving RCE in a single program meaning your entire system is pwned is behind the times compared other operating systems. In order to make freedesktop's security competitive again security restrictions need to be added.

yjftsjthsd-h 3y ago

> if someone has hacked in to the point that they can even run such query commands, surely I'm already pwn'd I believe the idea is that by adding security measures in the graphical server, you can limit it better. So yes, if there's no other protections then the graphical server is the least of your problems, but if you run a program in a container then the graphical server becomes the weakest link so we'd like to protect it. (I don't know why other protections - https://wiki.archlinux.org/title/Firejail#Firejail_with_Xorg https://wiki.archlinux.org/title/Firejail#Firejail_with_Xorg or XACE - weren't good enough, but there is an argument for something there)