Conversation

Notices

1. Embed this notice
   feld (feld@friedcheese.us)'s status on Thursday, 12-Jun-2025 06:56:51 JST feld

   • me
   @me no. Name one high profile attack in the last 20 years that leveraged X running as root to steal something valuable
   
   It basically doesn't exist. Browser attacked and reading your home directory was 1000x bigger of an attack surface.
   
   Like, nobody's having millions of people's PII hacked because of an X11 bug
   • Embed this notice
     Blurry Moon (sun@shitposter.world)'s status on Thursday, 12-Jun-2025 07:09:26 JST Blurry Moon

     in reply to

     • me
     @feld @me The issue is that every application on X11 can sniff everything about every other application running on the same X11 server. there are really old extensions to try to address this that nobody uses, the guy that forked into xlibre added in some kind of improved extension for this but I don't know anything about it.
     
     Also Wayland has frequently still had tearing problems and relatively recently they added back in explicit support for tearing lol in case you have an application where you don't want triple buffering you want improved latency.
     
     I am not going to say that Wayland is bad or that it should not have have been invented but it really does frequently seem like you get some steps back for steps forward and it kind of does prove the point about rewriting software from scratch
     Another Linux Walt Alt likes this.
   • Embed this notice
     Johnny Peligro (mischievoustomato@tsundere.love)'s status on Thursday, 12-Jun-2025 09:10:59 JST Johnny Peligro

     in reply to

     • me
     @feld @me tbf there's not that many x11 users
   • Embed this notice
     翠星石 (suiseiseki@freesoftwareextremist.com)'s status on Friday, 13-Jun-2025 19:03:38 JST 翠星石

     in reply to

     • Blurry Moon
     @sun @feld >The issue is that every application on X11 can sniff everything about every other application running on the same X11 server.
     If you don't run proprietary malware on your computer, that is a feature, not a bug.
     
     Of course every free software program should have access to the the keyboard input if it ever needs it.
     
     >hey added back in explicit support for tearing lol
     Wayland still doesn't give the option of freedom from vsync - it's only a per application setting that needs to be specifically configured.
   • Embed this notice
     :gnu:+bonifartius 𒂼𒄄 (bonifartius@qoto.org)'s status on Friday, 13-Jun-2025 19:54:29 JST :gnu:+bonifartius 𒂼𒄄

     in reply to

     • Blurry Moon

     @sun @feld imo if an application sniffs X11, it can do other things as well. either you can trust the software, or you don't.

     another display server isn't the issue. arcan just does it's thing. the issue is how people involved in wayland behave. if the product is better, they wouldn't need to use oppressive tactics. it's the same with rust or haskell (and openbsd people who constantly shit talk linux, but that's my pet peeve).

     this way they admit their product is shit. they behave like communists taking over successful businesses, putting the owners into a gulag, run the business into the ground and then use it as proof communism is good.

     Phantasm, Another Linux Walt Alt, Blurry Moon and feld like this.
   • Embed this notice
     Blurry Moon (sun@shitposter.world)'s status on Friday, 13-Jun-2025 20:02:23 JST Blurry Moon

     in reply to

     • :gnu:+bonifartius 𒂼𒄄
     @bonifartius @feld it was only really an issue because of network transparency and you could have programs running on different machines
     Another Linux Walt Alt likes this.
   • Embed this notice
     Linux Walt (@lnxw37j1) {3EB165E0-5BB1-45D2-9E7D-93B31821F864} (lnxw37j1@gnusocial.jp)'s status on Friday, 13-Jun-2025 22:16:34 JST Linux Walt (@lnxw37j1) {3EB165E0-5BB1-45D2-9E7D-93B31821F864}

     in reply to

     • Blurry Moon
     @sun Aren't these the same people cheering the fact that you can use PulseAudio to share your music across your network?
   • Embed this notice
     dobó istván (istvan@noauthority.social)'s status on Saturday, 14-Jun-2025 01:38:20 JST dobó istván

     in reply to

     @feld I’m so old I thought this was about Pentium II CPUs.

     feld likes this.