On Sun, Sep 16, 2018 at 11:15:56PM -0400, grarpamp wrote:
Any search will bring basic stuff like
https://insecure.org/sploits/xsecurekeyboard_fequent_query.html https://www.techrepublic.com/blog/linux-and-open-source/three-features-you-m... http://tutorials.section6.net/home/basics-of-securing-x11 https://www.reddit.com/r/openbsd/comments/83adcn/does_openbsd_x11_not_have_s...
Whether xorg, wayland, xenocara, drivers, ttys, init, login, getty, etc are receiving any level of scrutiny, audits, fuzzing, code scans, etc. The ancient and obscure it is, the less people look, and all the above are exactly that. Even mashing kbd on a FreeBSD can throw console into unrecoverable must kill state. And people talk how trust X?
Yes, Linux/BSD/etc tty/console/vt drivers need rewriting. On the bucket list, for the simple joy of it. https://en.wikipedia.org/wiki/Linux_console If interested in xterm perf, kitty kicks some serious goals - check its frame rates (comparo) in ncurses test: https://nick-black.com/dankwiki/index.php/Notcurses#Terminal_emulators https://sw.kovidgoyal.net/kitty/ (Although IMEHO, a vt ought be simplified, and support say tmux as a terminal multiplexer and disconnect/reconnect, rather than build this in as does kitty - although one can understand the temptation from the dev's perspective, elegance demands knowing when to step out of the way for the greater tmux good :).) Possible inspiration: https://en.wikipedia.org/wiki/Kmscon Post inspired by "Hacking the planet with Notcurses": Hacking the planet with Notcurses https://lwn.net/Articles/815475/ Author Nick Black has written an extensive book on the creation of textual user interfaces using the notcurses library; it's available under the Apache license [PDF]. "Many people asked how such a thing was useful. My usual response was that numerous devices don’t present a bitmap interface, that X11 GUIs run remotely over SSH are effectively unusable, that plenty of machines don’t have a GUI environment installed, that there are obvious applications for large outdoor displays, and that Sixel isn’t well-supported across different terminal emulators. It seems impossible in an age of gigatransistor graphics cards, but the text environment still presents perceivably less latency than most GUI toolkits."