Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #236626

Re: X server running on a different machine [Re: Wanted: a special purpose Debian installer]

From Greg Wooledge <greg@wooledge.org>
Newsgroups linux.debian.user
Subject Re: X server running on a different machine [Re: Wanted: a special purpose Debian installer]
Date 2021-06-29 20:50 +0200
Message-ID <CvqY1-kR-1@gated-at.bofh.it> (permalink)
References (5 earlier) <Cvixr-3L4-3@gated-at.bofh.it> <CvoCR-7xD-5@gated-at.bofh.it> <CvoWd-7DC-3@gated-at.bofh.it> <CvpIB-88k-7@gated-at.bofh.it> <Cvqlk-8t-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

> On 2021-06-29 1:27 p.m., Greg Wooledge wrote:
> > On Tue, Jun 29, 2021 at 04:33:50PM +0000, Andrew M.A. Cater wrote:
> >> ssh -Y is similar to ssh -X but does some authentication - yuu don't have
> >> to use xhost+ or similar.
> > 
> > You don't use xhost with ssh -X, either.  At least, not explicitly.
> > ssh takes care of that for you.
> > 
> > In fact, on Debian, ssh -X and ssh -Y do exactly the same thing, due
> > to changes that Debian made.  This is documented in the ssh(1) man page.
> > 
> > If you've been using "xhost +" together with "ssh -X", you've been doing
> > it wrong (and *dramatically* destroying all your network security) all
> > along.

On Tue, Jun 29, 2021 at 02:05:18PM -0400, Polyna-Maude Racicot-Summerside wrote:
> What I stated was pretty simple :

I wasn't replying to what *you* said.  I was replying to something that
Andrew Cater said.

> It's of not much use to start debate without reading fully the thread.

I was replying to *one* message from a person who *was not you*, because
that message contained massively important wrongness.

It is important that this wrongness be called out and eradicated if
possible.  Because it's *dangerously* wrong.

Your points about "people should start out by doing it the way we did it
back in 1991 so they learn the old ways first, and then they can move on
to the new ways" are irrelevant to my point from *that* message, which was:

DO NOT USE xhost + WITH ssh -X OR ssh -Y

That was the fucking point.


Now, if you want to advocate that people should use xhost + because
that's how you learned things back in the early 1990s, that's your right,
but I hope you will at least point out how INCREDIBLY INSECURE this is,
and that it should only be done on an isolated private network, and only
for educational purposes, never for actual work.

Even then, you wouldn't combine it with ssh -X.  xhost + and manually
overriding DISPLAY bypasses the ssh encryption layer entirely.  It also
involves starting the X server with a non-default option, so it's quite
a lot more work than using ssh -X.  Which is good.  We wouldn't want the
horribly broken way to be the easy way.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-06-25 15:50 +0200
  Re: Wanted: a special purpose Debian installer Dan Ritter <dsr@randomstring.org> - 2021-06-25 16:00 +0200
    Re: Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-06-25 16:50 +0200
  Re: Wanted: a special purpose Debian installer "Andrew M.A. Cater" <amacater@einval.com> - 2021-06-25 23:10 +0200
    Re: Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-06-26 11:50 +0200
      Re: Wanted: a special purpose Debian installer David Wright <deblis@lionunicorn.co.uk> - 2021-06-26 19:40 +0200
        Re: Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-06-26 20:40 +0200
          Re: Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-06-30 15:50 +0200
            Re: Wanted: a special purpose Debian installer Felix Miata <mrmazda@earthlink.net> - 2021-06-30 20:50 +0200
              Re: Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-07-01 15:10 +0200
                Re: Wanted: a special purpose Debian installer Brian <ad44@cityscape.co.uk> - 2021-07-01 17:30 +0200
                Re: Wanted: a special purpose Debian installer Brian <ad44@cityscape.co.uk> - 2021-07-02 19:50 +0200
                Re: Wanted: a special purpose Debian installer Felix Miata <mrmazda@earthlink.net> - 2021-07-01 18:50 +0200
                Re: Wanted: a special purpose Debian installer Brian <ad44@cityscape.co.uk> - 2021-07-01 22:10 +0200
                Re: Wanted: a special purpose Debian installer Felix Miata <mrmazda@earthlink.net> - 2021-07-01 22:40 +0200
                Re: Wanted: a special purpose Debian installer Brian <ad44@cityscape.co.uk> - 2021-07-02 00:00 +0200
                Re: Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-07-02 12:00 +0200
                Re: Wanted: a special purpose Debian installer Brian <ad44@cityscape.co.uk> - 2021-07-02 12:20 +0200
                Re: Wanted: a special purpose Debian installer Brian <ad44@cityscape.co.uk> - 2021-07-02 21:10 +0200
                Re: Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-07-01 22:20 +0200
            Re: Wanted: a special purpose Debian installer Brian <ad44@cityscape.co.uk> - 2021-07-01 00:20 +0200
  Re: Wanted: a special purpose Debian installer Curt <curty@free.fr> - 2021-06-27 09:40 +0200
    Re: Wanted: a special purpose Debian installer Richard Owlett <rowlett@cloud85.net> - 2021-06-27 10:40 +0200
    Re: Wanted: a special purpose Debian installer Peter Ehlert <pb21a@sdi-baja.com> - 2021-06-27 16:40 +0200
      Re: Wanted: a special purpose Debian installer Greg Wooledge <greg@wooledge.org> - 2021-06-27 16:40 +0200
        Re: Wanted: a special purpose Debian installer Greg Wooledge <greg@wooledge.org> - 2021-06-27 17:40 +0200
        Re: Wanted: a special purpose Debian installer Peter Ehlert <pb21a@sdi-baja.com> - 2021-06-27 17:40 +0200
          Re: Wanted: a special purpose Debian installer Brian <ad44@cityscape.co.uk> - 2021-06-27 19:40 +0200
          X server running on a different machine [Re: Wanted: a special purpose Debian installer] "Rick Thomas" <rick.thomas@pobox.com> - 2021-06-29 04:40 +0200
            Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-29 04:50 +0200
              Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Greg Wooledge <greg@wooledge.org> - 2021-06-29 05:20 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-29 11:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Andrei POPESCU <andreimpopescu@gmail.com> - 2021-06-30 10:30 +0200
              Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] IL Ka <kazakevichilya@gmail.com> - 2021-06-29 11:50 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-29 18:20 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] "Andrew M.A. Cater" <amacater@einval.com> - 2021-06-29 18:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Greg Wooledge <greg@wooledge.org> - 2021-06-29 19:30 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-29 20:10 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Greg Wooledge <greg@wooledge.org> - 2021-06-29 20:50 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] "Andrew M.A. Cater" <amacater@einval.com> - 2021-06-29 21:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special purpose Debian installer] Lucas Castro <lucas@gnuabordo.com.br> - 2021-06-29 21:10 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-29 22:50 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Greg Wooledge <greg@wooledge.org> - 2021-06-29 23:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-29 23:10 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Andrei POPESCU <andreimpopescu@gmail.com> - 2021-06-30 10:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-30 11:30 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] The Wanderer <wanderer@fastmail.fm> - 2021-06-30 12:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Andrei POPESCU <andreimpopescu@gmail.com> - 2021-07-01 01:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] The Wanderer <wanderer@fastmail.fm> - 2021-06-30 12:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-30 15:20 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] The Wanderer <wanderer@fastmail.fm> - 2021-06-30 15:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] <tomas@tuxteam.de> - 2021-06-30 16:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] <tomas@tuxteam.de> - 2021-06-30 12:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-29 22:50 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] <tomas@tuxteam.de> - 2021-06-30 12:00 +0200
                Mailing list behaviour, words and that [was: Re: X server ...] <tomas@tuxteam.de> - 2021-06-30 14:50 +0200
                Re: Mailing list behaviour, words and that [was: Re: X server ...] Roberto C. Sánchez <roberto@debian.org> - 2021-06-30 15:00 +0200
                Re: Mailing list behaviour, words and that [was: Re: X server ...] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-30 15:40 +0200
                Re: Mailing list behaviour, words and that [was: Re: X server ...] Brian <ad44@cityscape.co.uk> - 2021-06-30 20:20 +0200
                Re: Mailing list behaviour, words and that [was: Re: X server ...] Brian <ad44@cityscape.co.uk> - 2021-06-30 20:50 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-30 15:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] <tomas@tuxteam.de> - 2021-06-30 16:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Greg Wooledge <greg@wooledge.org> - 2021-06-30 17:10 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] <tomas@tuxteam.de> - 2021-06-30 17:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-30 17:50 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Dan Ritter <dsr@randomstring.org> - 2021-06-30 18:10 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-30 18:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Dan Ritter <dsr@randomstring.org> - 2021-06-30 20:30 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Brian <ad44@cityscape.co.uk> - 2021-06-30 21:30 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-01 07:20 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Dan Ritter <dsr@randomstring.org> - 2021-07-01 11:30 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] "Thompson, Brian" <brian@hashvault.io> - 2021-06-30 18:10 +0200
                Re: Artifical Intellignce ( was : X something) Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-06-30 19:00 +0200
                Re: Artifical Intellignce ( was : X something) <tomas@tuxteam.de> - 2021-06-30 19:20 +0200
                [OT, maybe] Joe <joe@jretrading.com> - 2021-06-30 22:20 +0200
                Re: [OT, maybe] Weaver <weaver@riseup.net> - 2021-06-30 22:30 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Andrei POPESCU <andreimpopescu@gmail.com> - 2021-07-01 02:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Andrei POPESCU <andreimpopescu@gmail.com> - 2021-07-01 02:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-01 06:40 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] - continue Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-01 07:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Joe <joe@jretrading.com> - 2021-06-30 22:10 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Brian <ad44@cityscape.co.uk> - 2021-06-30 20:00 +0200
                Re: X server running on a different machine [Re: Wanted: a special  purpose Debian installer] Brian <ad44@cityscape.co.uk> - 2021-07-01 01:10 +0200

csiph-web