Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #236665

Re: X server running on a different machine [Re: Wanted: a special purpose Debian installer]

From <tomas@tuxteam.de>
Newsgroups linux.debian.user
Subject Re: X server running on a different machine [Re: Wanted: a special purpose Debian installer]
Date 2021-06-30 16:40 +0200
Message-ID <CvJxE-374-7@gated-at.bofh.it> (permalink)
References (5 earlier) <CvpIB-88k-7@gated-at.bofh.it> <Cvqlk-8t-3@gated-at.bofh.it> <CvqY1-kR-1@gated-at.bofh.it> <CvFaH-qC-3@gated-at.bofh.it> <CvIBz-2uJ-11@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

On Wed, Jun 30, 2021 at 09:33:37AM -0400, Polyna-Maude Racicot-Summerside wrote:
> Hi,

[...]

> I was the stupid and dumb person who started talking about "the classic
> way" of authentication using X11.

Uh, whatever. I don't think you're stupid. I don't think *you* think
you're stupid. So I'm ignoring that :)

> I am so sorry to have had the wrong idea of telling someone that
> learning the "classic way" of authentication with X11 [...]

> Another user added that "xhost +x" can be used if there's a
> authentication problem. As one of the "things to try".

FWIW, I don't think it's "wrong". But if people use it, they should
understand the implications. The X protocol isn't the most secure
out there.

BTW: the problematic thing is called "xhost +", not "xhost +x", which
won't work...

  tomas@trotzki:~$ xhost + x
  xhost:  bad hostname "x"

...unless there's a host in your network named "x" :-)

Further, I don't think things are as bleak as Greg put them, since
by default, X doesn't listen on the network these days, but only
on a local Unix socket anyway. The attacker would have to have
access to the local machine. Security-wise there's bigger fish to
fry out there (automount, anyone?).

So I don't agree 100% with Greg, and I agree even less with the
way he put it (pointing out the issues might be more productive
than shouting), but he /has/ a point.

Cheers
 - t

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-06-25 15:50 +0200
  Re: Wanted: a special purpose Debian installer Dan Ritter <dsr@randomstring.org> - 2021-06-25 16:00 +0200
    Re: Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-06-25 16:50 +0200
  Re: Wanted: a special purpose Debian installer "Andrew M.A. Cater" <amacater@einval.com> - 2021-06-25 23:10 +0200
    Re: Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-06-26 11:50 +0200
      Re: Wanted: a special purpose Debian installer David Wright <deblis@lionunicorn.co.uk> - 2021-06-26 19:40 +0200
        Re: Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-06-26 20:40 +0200
          Re: Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-06-30 15:50 +0200
            Re: Wanted: a special purpose Debian installer Felix Miata <mrmazda@earthlink.net> - 2021-06-30 20:50 +0200
              Re: Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-07-01 15:10 +0200
                Re: Wanted: a special purpose Debian installer Brian <ad44@cityscape.co.uk> - 2021-07-01 17:30 +0200
                Re: Wanted: a special purpose Debian installer Brian <ad44@cityscape.co.uk> - 2021-07-02 19:50 +0200
                Re: Wanted: a special purpose Debian installer Felix Miata <mrmazda@earthlink.net> - 2021-07-01 18:50 +0200
                Re: Wanted: a special purpose Debian installer Brian <ad44@cityscape.co.uk> - 2021-07-01 22:10 +0200
                Re: Wanted: a special purpose Debian installer Felix Miata <mrmazda@earthlink.net> - 2021-07-01 22:40 +0200
                Re: Wanted: a special purpose Debian installer Brian <ad44@cityscape.co.uk> - 2021-07-02 00:00 +0200
                Re: Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-07-02 12:00 +0200
                Re: Wanted: a special purpose Debian installer Brian <ad44@cityscape.co.uk> - 2021-07-02 12:20 +0200
                Re: Wanted: a special purpose Debian installer Brian <ad44@cityscape.co.uk> - 2021-07-02 21:10 +0200
                Re: Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-07-01 22:20 +0200
            Re: Wanted: a special purpose Debian installer Brian <ad44@cityscape.co.uk> - 2021-07-01 00:20 +0200
  Re: Wanted: a special purpose Debian installer Curt <curty@free.fr> - 2021-06-27 09:40 +0200
    Re: Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-06-27 10:40 +0200
    Re: Wanted: a special purpose Debian installer Peter Ehlert <pb21a@sdi-baja.com> - 2021-06-27 16:40 +0200
      Re: Wanted: a special purpose Debian installer Greg Wooledge <greg@wooledge.org> - 2021-06-27 16:40 +0200
        Re: Wanted: a special purpose Debian installer Greg Wooledge <greg@wooledge.org> - 2021-06-27 17:40 +0200
        Re: Wanted: a special purpose Debian installer Peter Ehlert <pb21a@sdi-baja.com> - 2021-06-27 17:40 +0200
          Re: Wanted: a special purpose Debian installer Brian <ad44@cityscape.co.uk> - 2021-06-27 19:40 +0200
          X server running on a different machine [Re: Wanted: a special purpose Debian installer] "Rick Thomas" <rick.thomas@pobox.com> - 2021-06-29 04:40 +0200
            Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-29 04:50 +0200
              Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Greg Wooledge <greg@wooledge.org> - 2021-06-29 05:20 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-29 11:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Andrei POPESCU <andreimpopescu@gmail.com> - 2021-06-30 10:30 +0200
              Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] IL Ka <kazakevichilya@gmail.com> - 2021-06-29 11:50 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-29 18:20 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] "Andrew M.A. Cater" <amacater@einval.com> - 2021-06-29 18:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Greg Wooledge <greg@wooledge.org> - 2021-06-29 19:30 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-29 20:10 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Greg Wooledge <greg@wooledge.org> - 2021-06-29 20:50 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] "Andrew M.A. Cater" <amacater@einval.com> - 2021-06-29 21:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special purpose Debian installer] Lucas Castro <lucas@gnuabordo.com.br> - 2021-06-29 21:10 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-29 22:50 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Greg Wooledge <greg@wooledge.org> - 2021-06-29 23:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-29 23:10 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Andrei POPESCU <andreimpopescu@gmail.com> - 2021-06-30 10:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-30 11:30 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] The Wanderer <wanderer@fastmail.fm> - 2021-06-30 12:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Andrei POPESCU <andreimpopescu@gmail.com> - 2021-07-01 01:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] The Wanderer <wanderer@fastmail.fm> - 2021-06-30 12:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-30 15:20 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] The Wanderer <wanderer@fastmail.fm> - 2021-06-30 15:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] <tomas@tuxteam.de> - 2021-06-30 16:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] <tomas@tuxteam.de> - 2021-06-30 12:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-29 22:50 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] <tomas@tuxteam.de> - 2021-06-30 12:00 +0200
                Mailing list behaviour, words and that [was: Re: X server ...] <tomas@tuxteam.de> - 2021-06-30 14:50 +0200
                Re: Mailing list behaviour, words and that [was: Re: X server ...] Roberto C. Sánchez <roberto@debian.org> - 2021-06-30 15:00 +0200
                Re: Mailing list behaviour, words and that [was: Re: X server ...] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-30 15:40 +0200
                Re: Mailing list behaviour, words and that [was: Re: X server ...] Brian <ad44@cityscape.co.uk> - 2021-06-30 20:20 +0200
                Re: Mailing list behaviour, words and that [was: Re: X server ...] Brian <ad44@cityscape.co.uk> - 2021-06-30 20:50 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-30 15:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] <tomas@tuxteam.de> - 2021-06-30 16:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Greg Wooledge <greg@wooledge.org> - 2021-06-30 17:10 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] <tomas@tuxteam.de> - 2021-06-30 17:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-30 17:50 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Dan Ritter <dsr@randomstring.org> - 2021-06-30 18:10 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-30 18:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Dan Ritter <dsr@randomstring.org> - 2021-06-30 20:30 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Brian <ad44@cityscape.co.uk> - 2021-06-30 21:30 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-01 07:20 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Dan Ritter <dsr@randomstring.org> - 2021-07-01 11:30 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] "Thompson, Brian" <brian@hashvault.io> - 2021-06-30 18:10 +0200
                Re: Artifical Intellignce ( was : X something) Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-30 19:00 +0200
                Re: Artifical Intellignce ( was : X something) <tomas@tuxteam.de> - 2021-06-30 19:20 +0200
                [OT, maybe] Joe <joe@jretrading.com> - 2021-06-30 22:20 +0200
                Re: [OT, maybe] Weaver <weaver@riseup.net> - 2021-06-30 22:30 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Andrei POPESCU <andreimpopescu@gmail.com> - 2021-07-01 02:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Andrei POPESCU <andreimpopescu@gmail.com> - 2021-07-01 02:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-01 06:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] - continue Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-01 07:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Joe <joe@jretrading.com> - 2021-06-30 22:10 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Brian <ad44@cityscape.co.uk> - 2021-06-30 20:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Brian <ad44@cityscape.co.uk> - 2021-07-01 01:10 +0200

csiph-web