Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Because it's not an x11 "flaw" or exploit, it's just how X works. I also just don't buy the whole "well other stuff has exploits too" mentality.

I mean, yeah, it does, maybe. So why bother creating a password to a service if their database is probably running Linux anyway and the rdbms is probably compromised and yadda yadda yadda. It's the kind of argument you can make for anything.

Also no - privilege escalation is not "numerous" on Linux. It's very difficult to do in practice. It's only really a problem on systems built on old kernels which refuse to update. But those will always be insecure, just like running Windows 7 will be insecure.



A quick search for "linux local privilege escalation" in the CVE database (https://www.cve.org/CVERecord/SearchResults?query=linux+loca...) shows 25 results just for this year, so clearly these are very common.

So basically we have two issues here:

1. either focus on security even though these changes don't really improve the threat model

2. or allow disabled users and anyone who uses accessibility features to use GUIs




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: