Hacker News new | ask | show | jobs
by bemused 2051 days ago
The security superiority of Linux in contrast to Windows is rooted in its server/headless form - all of that changes as soon as you start good old X

Wayland is supposed to fix most of those legacy shortcomings enabling proper app-level sandboxing. It took a while, but its implementations are more or less usable as daily drivers these days - if you're interested in desktop security, help to push Wayland to become a hassle free replacement of X is appreciated a lot

2 comments

On the other hand, has Wayland figured out how to allow screen shots, screen sharing in video meetings, live streaming your screen and such things yet?
Yep, those things work (though both GNOME and KDE still have unstable compsitors, so take that as you will).

There is also pipewire going somewhat stable (I had issues with bluetooth but otherwise it worked perfectly), that would enable all these things without applications having to worry about the compository at all.

For the longest time we've been unable to get ActivityWatch [1] (an open-source automated time-tracker) to work reliably on Wayland due to the inability in many Wayland DEs to retrieve the title and app name of the active window.

Things have improved recently (in part due to our own efforts to submit PRs to DEs), but we still need one implementation per DE more or less, since many don't implement the "common" Wayland protocol to accomplish this (Gnome, KDE).

[1]: https://activitywatch.net

The issue is that you still need to sandbox your apps, if you sandbox your apps you could probably create a sandbox around X too. So far most wayland+flatpack apps are not secure but the GUIS advertise them as sandboxed.