X.Org Hit By New Security Vulnerabilities - Two Date Back To 1988 With X11R2

[Monsterovich]

Xorg on Rust when?

[kpedersen]

Luckily Xorg is still actually maintained, so these will be fixed in due course.

I wonder when bugs written today in all the different Wayland compositors will be discovered? Going by this, it will be 2058!!

[andyprough]

Kind of funny you had to find a distro most havent even heard of to get such a quote.

You probably could have gotten more well know distribution contributors to say it too if you looked hard enough, but for most people it is ready and present.

I wasn't looking for anything - I've been watching that podcast for a couple years and I just noticed he said that the other day so I linked to it. I have no idea what other distro contributors say about wayland. I actually assumed that the wayland devs DID want distros to use it by default, so I was proven wrong.

[Brittle2]

Who cares?
Linux Mint developers and users for sure they don't care about security vulnerabilities.
Otherwise they will not be everyday with Linux Mint is great, it's fine, they don't need any of the features that KDE Plasma, Gnome has, yada yada.
I wonder how long will they be able to keep with their fanboysm / fanatism.
Same for Nvidia users, how a colleague said above.
Users who defend crap, don't deserve any empathy for their own self-made problems!

they care, they just didn't jump on the wayland boat because it didn't fit their need, but that quote was 2 years ago, before issues with wayland being too minimalistic and portais,wlroots got fixes and improvements, and they was never against merge request for wayland fixes, or implementing waylabd etc, btw they are talking about supporting wayland, it is in linux mint blog

[Brittle2]

What I'm suggesting is that there may be more behind some of the 'bugs' in open source than just a mistake.

least out-of-touch conspirationist

[Brittle2]

The sad thing is that stuff like this happens all the time with open source software yet the zealots still cling to their demonstrably incorrect belief that open source is more secure because of the whole "millions of eyes looking at the code" argument.

The problem is that there's no way of knowing the skill level or the intent of the "millions of eyes" and as anyone that has ever done any coding knows, it can be very tricky to track down a bug that exists accidentally, much less figure out of a vulnerability exists just by looking at code.

God knows how many other security holes exist in various open source projects.

it's very different something being more secure, than being flawless, and you don't seen to understand that difference

also saying that open-source isn't secure just because a dead project, created 40 years ago, that was already insecure, is insecure, is dumb

[higgslagrangian]

Wayland devs just told the XeroLinux lead dev that wayland is not recommended for production system

OMG, the lead developer of XEROLINUX??!?!?! OMG!!

Seriously. XeroLinux? You can't be serious. Who tf cares about that.

[andyprough]

OMG, the lead developer of XEROLINUX??!?!?! OMG!!

Seriously. XeroLinux? You can't be serious. Who tf cares about that.

XeroLinux is quite a popular Arch spin from what I hear. And I don't care if you care - I was just writing what he said. It's not about XeroLinux - if what he said is true, it's about how the Wayland devs feel about their own project - as in, not ready for production, not ready to be the default for any distro.

[higgslagrangian]

XeroLinux is quite a popular Arch spin from what I hear. And I don't care if you care - I was just writing what he said. It's not about XeroLinux - if what he said is true, it's about how the Wayland devs feel about their own project - as in, not ready for production, not ready to be the default for any distro.

You can't be serious.

Get a f* grip.

I don't care where you are quoting this from. You can't be so f* naive.

[WereCatf]

Geesh, the toxicity in the comments here is starting to reach Slashdot-levels. Shame on you, people.