BTW, one feature of X that has been missing in wayland is apparently something called "emulated inputs" which I personally never missed, but it is now getting fixed in wayland the proper way by the means of libei:
http://who-t.blogspot.com/2020/08/li...input.html?m=1
The following paragraphs from the blog post really says it all:
"Having a separate extension worked around the issue of detectability and thus any client could spoof input events. Security concerns were addressed with "well, just ifdef out that extension then" which worked great until other applications started using it for input emulation..."
and
"Now it's 2020 and we still have an X server that basically allows access to anything and any client to spoof input. This level of security is industry standard for IoT devices but we are trying to be more restrictive than that on your desktop, lest the stuff you type actually matters... "
and finally this gem
"The whole "any to any" is a big thing in X and just shows that in the olden days you could apparently trust, well, apparently anyone"
😊
What is great is that this new library for emulating inputs is not even tied to wayland so it can in fact even be used under classic X and thus improve security there as well.
http://who-t.blogspot.com/2020/08/li...input.html?m=1
The following paragraphs from the blog post really says it all:
"Having a separate extension worked around the issue of detectability and thus any client could spoof input events. Security concerns were addressed with "well, just ifdef out that extension then" which worked great until other applications started using it for input emulation..."
and
"Now it's 2020 and we still have an X server that basically allows access to anything and any client to spoof input. This level of security is industry standard for IoT devices but we are trying to be more restrictive than that on your desktop, lest the stuff you type actually matters... "
and finally this gem
"The whole "any to any" is a big thing in X and just shows that in the olden days you could apparently trust, well, apparently anyone"
😊
What is great is that this new library for emulating inputs is not even tied to wayland so it can in fact even be used under classic X and thus improve security there as well.
Comment