Path: csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: vallor <vallor@cultnix.org>
Newsgroups: comp.os.linux.misc
Subject: Re: Artix Linux and Xlibre
Date: 8 Aug 2025 06:00:32 GMT
Lines: 24
Message-ID: <mfli40Fll61U2@mid.individual.net>
References: <1063lgp$jmj$2@reader1.panix.com> <1064ag9$1kvkq$1@dont-email.me> <1064m75$1lvr1$1@dont-email.me> <10667je$35rkf$2@dont-email.me> <106bdkb$2s14s$1@dont-email.me> <106bjgj$2t9mq$5@dont-email.me> <106cld0$33q3n$2@dont-email.me> <wwvzfchsxx8.fsf@LkoBDZeT.terraraq.uk> <106l5kp$133ed$3@dont-email.me> <wwvfre864jx.fsf@LkoBDZeT.terraraq.uk> <106ohbv$1q0ne$1@dont-email.me> <wwvms8fdsa9.fsf@LkoBDZeT.terraraq.uk> <106s6ae$2irb0$6@dont-email.me> <wwv7bziqkz4.fsf@LkoBDZeT.terraraq.uk> <106thun$2tl20$1@dont-email.me> <20250805120229.00002255@gmail.com> <106ulcf$35j8e$3@dont-email.me> <20250806090124.00005af4@gmail.com> <10716ac$3ok85$4@dont-email.me> <20250807141447.000028d3@gmail.com> <wwvwm7e230z.fsf@LkoBDZeT.terraraq.uk> <20250807155622.00003411@gmail.com> <1073tqh$empg$7@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Trace: individual.net giOM0TZH4KJI+cCsi9omwgsgV4TS4Ym5eDDAh9cWR8RxpgNsjI
Cancel-Lock: sha1:PHsb++uOwBORrkvqHQzngW5Sft8= sha256:3Lk206pIjWkp38JXaMKSHM1QiN+u4AJr+9xx60J8qXI=
X-Face: +McU)#<-H?9lTb(Th!zR`EpVrp<0)1p5CmPu.kOscy8LRp_\u`:tW;dxPo./(fCl CaKku`)]}.V/"6rISCIDP`
User-Agent: Pan/0.163 (Hmm5; d2f7fd9a; Linux-6.16.0)
Xref: csiph.com comp.os.linux.misc:70591

On Fri, 8 Aug 2025 04:18:26 -0000 (UTC), Lawrence D'Oliveiro
<ldo@nz.invalid> wrote in <1073tqh$empg$7@dont-email.me>:

> On Thu, 7 Aug 2025 15:56:22 -0700, John Ames wrote:
>> If evil software is running on the local machine under a valid
>> user's session, the safeguards've *already failed* ...

Bingo.

> 
> Not necessarily that it’s actually running *on* there, but that it is 
> accessing that display server.

Even if someone were to open their display to the Internet,
how is that going to happen without the display's cookie?

Also, there is the option for programs to grab the keyboard
for password input, such as ssh-askpass does by default.

-- 
-v System76 Thelio Mega v1.1 x86_64 NVIDIA RTX 3090Ti 24G
   OS: Linux 6.16.0 D: Mint 22.1 DE: Xfce 4.18 
   NVIDIA: 575.64.05 Mem: 258G
   "In /dev/null no one can hear you scream..."