Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Re:If it's accessing your X server, it's elevated (Score 1) 375

Oh how about a new protocol extension that allows one designated program to receive all keyboard inputs regardless of any other grabs. The X11 server can keep on pretending that the other grabbers still have such a grab.

I'm not really sure how creating yet another way for a "designated program" to monitor input events is supposed to address the problem that any X11 client can monitor keyboard events on any window in the absence of a grab, unless you intend to rewrite all existing software to grab the keyboard on receiving input focus, and force all the desktop environments to implement support for the extension and move their global keybindings into a specially designated client. At that point you might was well switch to a system designed for secure I/O from day one—like Wayland.

Look: X11 works on Windows even though windows can apparently REALLY gab the keyboard. X11 will we are told work on Wayland too despite the fact that wayland can apparently REALLY grab they keyboard. Do you really think it couldn't be extended to do that itself?

It's no different with a rootless X server on Windows. Input received by any X window can be observed by any X client, unless one client grabs the input. XWayland will probably work the same way, with native Wayland clients secure from each other and from X11 clients but no isolation between X11 clients and no support for grabbing input directed at non-X11 windows. XWayland is meant as a shim between the Wayland compositor and ordinary X clients; it doesn't support external window managers and isn't expected to host a full X11 desktop environment. You wouldn't run something like a screen locker as an X11 client under XWayland. It wouldn't be secure, for the same reasons that screen lockers aren't secure under X11 now, and similar compatibility problems would occur if you tried to implement the Wayland input model with X11 extensions.

It's easy to implement the insecure X11 model on top of a secure system. The reverse is much more difficult.

Comment Who says it serves no purpose? (Score 3, Insightful) 228

What offends you may not offend me. And vice-versa. What serves no purpose for you, may serve a purpose for me. Be it intended offense, or otherwise, or both at once.

No one in the USA has the "right to not be offended." Being offended is subjective. It has everything to do with you as an individual, or as part of a particular group; it varies due to your moral conditioning, your religious beliefs, your upbringing, your education; what offends one person or group (of any size) may not offend another, nor a person of another grouping; and in the final analysis, it requires one person to attempt to read the mind of other persons they do not know in order to anticipate whether a specific action will cause offense in the mind of another.

And no, codifying an action in law is not in any way sufficient... it is well established that not even lawyers can know the law well enough to anticipate what is legal, and what is not -- any more than you can guess what is offensive to me, or not.

Sane law relies on the basic idea that we try not to risk or cause harm to the bodies, finances and reputations of others without them consenting and being aware of the risks. It does not rely on the idea that we "must not cause offense."

Law that bans something based upon the idea that some individual or group simply finds the behavior objectionable is the very worst kind of law, utterly devoid of consideration or others, while absolutely permeated in self-indulgence.

Comment Re: If it's accessing your X server, it's elevated (Score 2) 375

Some other window most likely does have the keyboard focus, but that's not the same as grabbing the keyboard. Having the focus doesn't prevent input events from also being delivered to other windows, it just tells the non-focused windows to ignore the events. Integrity and privacy for both input and output is a hard problem and something very few windowing systems manage to get right. The solutions tend to involve some degree of inconvenience for the user.

Comment Re:If it's accessing your X server, it's elevated (Score 1) 375

What exactly would you propose to add? This isn't a matter of implementing new functionality, but rather removing fundamental misfeatures. Any change to address this issue is going to end up breaking existing applications which depend on the original input behavior.

In any case this is hardly the only reason to switch to Wayland. It's just one of many areas which highlights the drawbacks of trying to tack modern best practices on top of an aging framework. Better to adopt a clean and modern design as the base and confine the hackish workarounds needed to support older clients to a separate compatibility layer.

Comment Re:First they came for... (Score 2) 228

what have you "won" exactly?

You "win" Turkish citizens annoyed with their government -- a win in the only venue likely to be able to create change there.

so you're for not opening diplomatic relations with cuba? we should just never ever ever reconcile or talk with cuba?

Diplomatic relations are not on the same level as corporate sponsorship of repression. Yes, we should talk to other governments, definitely including cuba, and yes, we should allow our citizens access if they wish to go there, and vice-versa.

But no, I don't think it is a positive thing when corporations adopt behavioral restrictions that are antithetical to freedom in general. It's not that I expect them to change, it's just that I don't like it, and as I am free to object and explain here, I do so.

we don't talk to iran? what is iran's attitude going to be then?

This is a straw man. I am all for talking to, and mutual visitation of, Iran (Cuba, etc.) These things allow cultural values to spread -- because generally, the dialog is quite open. I am not for FB repressing speech. These are not the same issues.

you are a dogmatic rigid ideologue

It's always entertaining to watch someone slinging mud at their own straw man.

If you want to know what I think, ask me. Don't put words in my mouth.

Comment They only come for the ad viewers (Score 2) 228

the absence of facebook won't make those problems go away.

I missed addressing that; responded a bit too quickly, sorry.

I consider this assertion to be flawed; here's why. FB has a very high public profile. Any visitor to the US that is exposed to social media is likely to be aware of both the institution and its reach. They can also learn that the reason "they can't have nice things" is because their government has stepped in the way of their citizens using religion as an excuse. Likewise, US family members who cannot connect with Turkish family members are likely to hold strong opinions, and share them.

If anything is going to make things change, I think that's far more likely than a FB presence that is repression-compliant.

Of course, this would require Zuckerberg and crew to operate using a metric quite different from the "maximize users as ad viewers" model, and that doesn't seem to be in the cards.

Comment Agreed (Score 2) 228

There is an issue of State here, the Turkish State, requiring Facebook to filter and or creating at least the implied thread[sic] they will be blocked if they do not filter.

Yes. But it is, in fact, the Turkish state. Not the US state.

I agree with you that I don't like FB's policy here (nor Turkey's) and I would be much happier if FB operated with a lean towards freedom of speech, but that's never been who they were -- they mute, restrict and ban US posters on a regular and constant basis WRT written material and photographs, and they have inflicted their "Real Name" policy on members without regard for the numerous negative consequences.

The objective of FB is to sell ads they can put in the faces of their members. Those who describe members as FB's "product" seem to me to be very close to the mark. How they treat membership, then, can be expected to be the fruits of a policy to maximize the size of the group. And frankly, that's what I see when I look at their policies. Not care for quality, safety or freedom of speech -- just a place to farm ad consumers.

I suspect we're in a similar position to someone trying to tell a happy dictator that "absolute power is bad." It wastes our time and annoys the pig. Er, Zuckerman, I mean. But I repeat myself.

Comment Re:First they came for... (Score 1) 228

If gays were members in places with fundamentalist islam, as soon as they were discovered they would likely be killed.
Banning gays from facebook in those places actually protects them

Say I'm gay, I speak the language of Some Islamic State, and I live here in the US, and I have a FB page and otherwise post around FB. Facebook bans gays in Some Islamic State. They refuse to display my page or commentary in Islam.

Or just say I'm female, same set of circumstances otherwise.

This does not protect me, it only serves to eliminate gay/female voices. The consequences of that are fairly obviously negative to you, are they not?

This is also one of the consequences common to FB's "Real Name" policy. If you are a member of some forbidden or politically disadvantaged community, your speech is constrained. This simply serves to keep you down.

Comment Re:If it's accessing your X server, it's elevated (Score 5, Informative) 375

I'm not familiar with writing apps for X, but are you saying that every program that displays a window in X can log all keystrokes including in windows that are not associated with that program?

Yes. This isn't just X, by the way; it's a common design across most operating systems. Any client can register to receive keyboard and mouse input regardless of the current focus, unless another client has already "grabbed" the input device. This is how things like global keybindings are typically implemented. Windows used for password entry (including lock screens) can grab the keyboard to prevent other programs from listening in. The problem is that this only works if no other program has already grabbed the keyboard.

Secure input handling is one of the many reasons why everyone is eventually planning to switch to Wayland. Under Wayland, only the compositor has access to the raw input or the ability to inject simulated input events. The compositor manages any global keybindings and forwards the remaining events exclusively to the active window.

Comment Re:First they came for... (Score 1) 228

if the positive influence outweighs the negative

The problem here is who defines positive or negative. When you go with the majority or those who otherwise hold the most power, that rules out gays right out of the gate -- because gays are a minority and hold less power.

If you ask the minority/less-powerful what the positives and the negatives are, you're going to get a very different answer than if you ask the majority/powerful. Quite often, the minority/less-powerful answer will be the correct one.

a bastardized influence, in order to exist, is still an influence, and better than no influence at all... this is called realism

Actually, I think it is more accurately described as cowardice. YMMV, obviously.

Comment and... (Score 1) 534

The rest of us may gape in amazement at the fact that you're willing to shell out a premium for an inferior product, but that's fine as long as you believe it isn't inferior.

...and some of us will gape in amazement that you're willing to subject yourself on a permanent basis to a vastly inferior operating system just to save a few bucks on cheap hardware. Lotta gaping going on WRT both sides of the coin, apparently. :)

Comment 40 years? No. (Score 1) 248

Nor was the new testament written and compiled over 2000 years.
More like 40 years max for both.

The NT has appeared in many distinctly different versions. Bishop's bible, King James, and so on. Because of the nature of the source material (Greek, Latin, Aramaic) the act of translation is prone to producing differences. The "modern" versions often read quite differently.

For instance, Matthew 5:18:

King James: For verily I say unto you, Till heaven and earth pass, one jot or one tittle shall in no wise pass from the law, till all be fulfilled.

God's Word: I can guarantee this truth: Until the earth and the heavens disappear, neither a period nor a comma will disappear from Moses' Teachings before everything has come true.

New Living Translation: I tell you the truth, until heaven and earth disappear, not even the smallest detail of God's law will disappear until its purpose is achieved.

...and so on. And that's without the various doctrinal interpretations that vary over the years and the various people who further interpret the text to others.

Those differences can be huge. The context of the above is with regard to the continued relevance of the laws of the old testament. Jesus (the speaker) says that until heaven and earth pass away (which I think we can go with "hasn't happened yet"), the law remains in place. But that doesn't stop entire Christian sects from trying to claim that the OT has been superseded in its entirety by the NT.

Comment Up, up and away (Score 1) 248

Hang a lighter-than-air balloon off the top of the elevator. If the balloon pops, the force is released from the balloon cable (which can be very short) and the brake engages. No counterweight or long cable required. Now you have the same energy requirements for lift (because the balloon is countering the weight of the unloaded elevator) and you can go back to considering how to create rack and pinion out of short rail sections (to allow for flex) plus power pickup of some kind (induction is an excellent candidate, because you can ensure that the energy pickups are very close to the sources during all operations. Fractions of an inch should be entirely practical.)

The only real problem is all of our bloody balloons leak. :)

Slashdot Top Deals

I tell them to turn to the study of mathematics, for it is only there that they might escape the lusts of the flesh. -- Thomas Mann, "The Magic Mountain"

Working...