X11/X.Org Security In Bad Shape 179
Posted
by
Soulskill
from the i-blame-the-schools dept.
from the i-blame-the-schools dept.
An anonymous reader writes "A presentation at the Chaos Communication Congress explains how X11 Server security with being 'worse than it looks.' The presenter found more than 120 bugs in a few months of security research and is not close to being done in his work. Upstream X.Org developers have begun to call most of his claims valid. The presentation by Ilja van Sprunde is available for streaming."
XWayland (Score:5, Informative)
Broken by design (Score:4, Informative)
It is not the way X works is particularly secure to begin with. Once an app has a connection to the X server, it has full control over the world of window, pixmaps and events on the server including of course all other apps.
Not that I have any faith in Wayland or Mir being any better, its developers coming from the X world in the first place, I am sure that they will make their new shiny systems vulnerable in the same ways.
Re:Fucking kill it already (Score:4, Informative)