@me no. Name one high profile attack in the last 20 years that leveraged X running as root to steal something valuable
It basically doesn't exist. Browser attacked and reading your home directory was 1000x bigger of an attack surface.
Like, nobody's having millions of people's PII hacked because of an X11 bug
It basically doesn't exist. Browser attacked and reading your home directory was 1000x bigger of an attack surface.
Like, nobody's having millions of people's PII hacked because of an X11 bug
@feld @me The issue is that every application on X11 can sniff everything about every other application running on the same X11 server. there are really old extensions to try to address this that nobody uses, the guy that forked into xlibre added in some kind of improved extension for this but I don't know anything about it.
Also Wayland has frequently still had tearing problems and relatively recently they added back in explicit support for tearing lol in case you have an application where you don't want triple buffering you want improved latency.
I am not going to say that Wayland is bad or that it should not have have been invented but it really does frequently seem like you get some steps back for steps forward and it kind of does prove the point about rewriting software from scratch
Also Wayland has frequently still had tearing problems and relatively recently they added back in explicit support for tearing lol in case you have an application where you don't want triple buffering you want improved latency.
I am not going to say that Wayland is bad or that it should not have have been invented but it really does frequently seem like you get some steps back for steps forward and it kind of does prove the point about rewriting software from scratch
Follow
+bonifartius 𒂼𒄄
@sun @feld imo if an application sniffs X11, it can do other things as well. either you can trust the software, or you don't.
another display server isn't the issue. arcan just does it's thing. the issue is how people involved in wayland behave. if the product is better, they wouldn't need to use oppressive tactics. it's the same with rust or haskell (and openbsd people who constantly shit talk linux, but that's my pet peeve).
this way they admit their product is shit. they behave like communists taking over successful businesses, putting the owners into a gulag, run the business into the ground and then use it as proof communism is good.
@bonifartius @feld it was only really an issue because of network transparency and you could have programs running on different machines
@sun Aren't these the same people cheering the fact that you can use PulseAudio to share your music across your network?
