X.org has some serious security flaws.
https://www.techrepublic.com/article/a-l...rom-x-org/
"For those that don't know, X was originally designed and released in 1985 and X11 in 1987. X.org replaced X11 and was originally released April 6, 2004. X.org lack a few very important security features that are critical for modern era usage and hardware:
- All X applications have access to everything on your screen
- All X applications can register to receive every keystroke, regardless of which window said keystrokes are typed within
- Applications such as browsers can be remotely controlled such that keystrokes can be forged as if the user were typing them
- The xhost + option can completely disable any security on the display
Effectively, with X.org, your display could be turned into a keylogger."
It seems that Ubuntu 18.04 will include Wayland, but enable X.org by default.
Will Linux Lite 4.0 include Wayland?
Not by default. Wayland is far from ready for mass, reliable, full hardware supported deployment.
(03-04-2018, 07:06 AM)NeonRed link Wrote:X.org lack a few very important security features that are critical for modern era usage and hardware:- All X applications have access to everything on your screen
- All X applications can register to receive every keystroke, regardless of which window said keystrokes are typed within
- Applications such as browsers can be remotely controlled such that keystrokes can be forged as if the user were typing them
- The xhost + option can completely disable any security on the display
Effectively, with X.org, your display could be turned into a keylogger."
Wow, does that mean that linux is far from the secure system we are led to believe? Keylogger? Not safe to be used for on-line banking and such like? I'm ultra concerned now about continuing on-line finances with linux lite. Or are the risks still negligable? :o
(03-04-2018, 10:03 AM)justme2 link Wrote:Wow, does that mean that linux is far from the secure system we are led to believe? Keylogger? Not safe to be used for on-line banking and such like? I'm ultra concerned now about continuing on-line finances with linux lite. Or are the risks still negligable? :o
No system connected to outside world, or where one can be made can be secure.
It can only be having more security than having less security, but it cannot be "secure".
(03-04-2018, 12:54 PM)bitsnpcs link Wrote:No system connected to outside world, or where one can be made can be secure.
It can only be having more security than having less security, but it cannot be "secure".
Yes, I understand that, but ... the quote by NeonRed, e.g. that all X applications can have access to the screen indicates to me that the system is far from being 'nearly' secure! At least windows + Avast gives me what is claimed to be an isolated browser for banking mode. The processor vulnerabilities recently identified might reduce that security though. Must investigate Avast free Home edition for Ubuntu before I lose confidence in linux for anything other than basic tasks where security is not important.
EDIT: Seems like Avast free home edition for Linux no longer exists!
If you objectively compare overall system security to Windows, you're still significantly better off on a Linux system. Going back to Windows would be a foolish, knee jerk reaction. Consider things on the full spectrum.
Sent from my Mobile phone using Tapatalk
(03-04-2018, 02:42 PM)Jerry link Wrote:If you objectively compare overall system security to Windows, you're still significantly better off on a Linux system. Going back to Windows would be a foolish, knee jerk reaction. Consider things on the full spectrum.
Sent from my Mobile phone using Tapatalk
I really don't want to revert, just looking for reassurance, all my machines now run only linux lite.
But I do worry about on-line banking, which I used for at least 8 years with windows & Avast bank mode, without any problems.
" you're still significantly better off on a Linux system" You're being kind Jerry. A novice computer user, which is what the overwhelming majority of Windows users are (given that any real knowledge of the system is virtually inaccessible to most of them) is tremendously exponentially better off with a Linux system for multitudes of reasons.
TC
justme2 link Wrote:I really don't want to revert, just looking for reassurance, all my machines now run only linux lite.
But I do worry about on-line banking, which I used for at least 8 years with windows & Avast bank mode, without any problems.
I never directly referred to you when I wrote that. It was a general statement for those who will read this thread and get the wrong idea. If Wayland was so ready for the masses, it would be the default in all the top distros. But it's not.
Sent from my Mobile phone using Tapatalk
(03-04-2018, 02:00 PM)justme2 link Wrote:At least windows + Avast gives me what is claimed to be an isolated browser for banking mode. The processor vulnerabilities recently identified might reduce that security though.
remove my pic, not on topic