2 ms·
The X11 Security extension is nearly 30 years old at this point, but Wayland users still haven't heard of it. One wonders what else they're missing out on.
by tedunangst 3y ago
The X11 Security extension is nearly 30 years old at this point, but Wayland users still haven't heard of it. One wonders what else they're missing out on.
- nolist_policy 3y agoYes and then HN'lers will shame any distro enabling it by default to death.
- yjftsjthsd-h 3y agoI've wondered about this for a while - why didn't XACE get wide adoption?
- tedunangst 3y agoBecause nobody actually cares about keyloggers. They just like how it feels to say "Wayland is secure". Anybody who cared about key loggers or screen scrapers or any of that solved their problem two decades ago.
- arp242 3y agoFrom what I can find XACE doesn't actually work all that well. e.g. [1] mentions "X Applications expect full access to X server and die when denied any access". It's rather vague and kind of hard to find more detailed information. I also agree with the sibling comment from tedunangst that most people just don't worry all that much about keyloggers, nor should they IMHO because it's not really a common attack vector. [1]: https://fedorapeople.org/~dwalsh/SELinux/Presentations/sandbox.pdf https://fedorapeople.org/~dwalsh/SELinux/Presentations/sandb...