3 ms·
It’s been under a month since Linux patched a zero-day that made it trivial for any program to get root.
by hedora 3y ago
It’s been under a month since Linux patched a zero-day that made it trivial for any program to get root.
- orangeboats 3y agoI don't see how this is related to the topic at hand. A zero-day attack can be patched, but the security issues with X11 are intrinsic to the protocol itself and are nontrivial to fix.
- welterde 3y agoThat is not true. There are extensions to the X11 server that can resolve many of the security issues, but almost no one cares enough to use them. If you are doing X11 forwarding via SSH it defaults to a more restricted configuration that only allows a more restricted access to the server (no direct sniffing of the input devices for instance).
- nextaccountic 3y agoDo you browse the internet with scripts on? (Javascript and Wasm). It is fully untrusted code that runs in a sandbox. Do you expect that random webpages are ableto steal all data from all applications you run, and all files you have? Including passwords etc.
- pabs3 3y agoSpectre was possible to attack from JavaScript: https://leaky.page/ https://leaky.page/