orowith2os

joined 1 year ago
[–] [email protected] 2 points 1 year ago

I used to run a multi-monitor desktop setup with Xorg, via the nVidia drivers. Two identical monitors, single framebuffer, no scaling, no tearing, single vsync.

One monitor, one framebuffer, an old use case that for some doesn't even exist now, inefficient and slow tearing prevention, laggy vsync.

That wasn't a multi-monitor desktop setup. That was a hacked together multi-display, single-screen setup.

Also why would you link an LD_PRELOAD attack? That's not Wayland-specific in any way. Any other protocol and library is vulnerable to that too. But let's point out one major issue with that: the LD_PRELOAD needs to be loaded in before the compositor in order to be relevant. With X, you can do that at runtime. Let's also read the README from the repository:

This program is in no way meant as criticism of the Wayland project. It simply demonstrates that creating a secure desktop requires more than just a few server-side restrictions.

Wayland isn't the only software we need for a secure desktop; it just handles making the display secure. For libraries and application sandboxing, you want Flatpak, and we're making progress on dynamic permissions there.

So? What's your point? Nothing here is a Wayland-specific argument. Your setup wasn't functional, it was fundamentally a hack, and one that not-NVIDIA/Intel/AMD hardware doesn't support. Your argument is falling flat on its face.

[–] [email protected] 1 points 1 year ago (2 children)

No.

Xorg doesn't support any of that. Multimonitor is nonexistent if you want to use it on a desktop, Xwayland still suffers from the lack of multimonitor (fractional+integer) scaling, and it tears horribly if you don't want to use inefficient and annoying vsync (Wayland's is fine).

Xorg is feature complete for its time; not for this time. The opposite goes for Wayland. Technically it's a "feature" that any application can keylog on Xorg, that doesn't mean that they should be free to do so without limit on Wayland too. If that means Wayland isn't feature complete and Xorg is, then so be it.

[–] [email protected] 2 points 1 year ago (1 children)

Yes, I am well aware of that. When someone refers to X, or Xorg, or X11, they're usually referring to bare metal X - you know, the insanely broken thing that people still want to use for some inane reason.

So what's your point? Why does this conversation continue to go on? It's clear that Xorg is unmaintained and will not be fixed, and Xwayland is the only thing that matters. Why argue it?

[–] [email protected] 2 points 1 year ago (3 children)

The ability to stop applications from keylogging you, secure and efficient screenshare, decent compositing, not to mention all of the cruft it's obtained over the years that stops it from obtaining all of these. And, as a whole, Xorg is completely incompatible with multi-monitor setups - no fractional scaling, and no multi-monitor scales, as well as refresh rates as you mentioned.

All we should be using nowadays at most is Xwayland. You only get a pass for bare X if:

  1. You need accessibility tools that don't work on Wayland yet: https://github.com/flatpak/xdg-desktop-portal/issues/1046
  2. You use some insanely old hardware that doesn't support the appropriate in-kernel and userspace APIs for Wayland to function.
  3. You use NVIDIA, and can't feasibly use Nouveau.

Otherwise, get the fuck off of Xorg. The ecosystem has matured enough such that Wayland Just Works for basically everyone.

[–] [email protected] 1 points 1 year ago

Possibly, but it sounds like a pain to work with, if I understand the technical details correctly.

[–] [email protected] 2 points 1 year ago

The browser would need to be allowed to parse it, as they're the ones displaying the content; it would imply, however, that adblockers and other extensions would no longer be allowed.

[–] [email protected] 4 points 1 year ago

you’re running a drm-compilant browser

They also don't want users to be able to use adblockers, that isn't all they're checking for. So this absolutely is the case. Their entire proposal is contradictory.

[–] [email protected] 4 points 1 year ago

Nobody is actively working on it now; the same can't be said for Wayland. Recently, it even hit a development low of all time. The only ones working on it are the ones getting paid to work on it, and even then, only those familiar with the codebase. Looking at the history, the only major changes are for Xwayland, and aren't at all often.

If (almost) all of the developers have abandoned something in favor of a newer piece of software that does the job better, I think it's sufficient to say that it's deprecated and unmaintained.

[–] [email protected] 7 points 1 year ago (10 children)

No, I'm thinking of Xorg. The development on it has slowed to less than a crawl, and not because it's feature-complete. It's unmaintainable, and hell to manage for anyone that's not a senior Xorg developer.

[–] [email protected] 5 points 1 year ago (9 children)

The point of this is so that the user can't modify the site at all, despite what the proposal might say. Their goals and non-goals are contradictory.

Running this content in a container will not protect you. Just don't even try to adapt to it. Reject it completely.

[–] [email protected] 20 points 1 year ago (14 children)

Ironic how he chose an X in a strikingly similar style to the (old, unmaintained, and deprecated) Xorg. That was certainly a choice of all time.

[–] [email protected] 3 points 1 year ago (1 children)

That way should not be intrusive ads, and it shouldn't be tracking without user consent.

On their own, exposed to the user in an easily understandable way and easily customizable, they're not bad. They can even help; used right, you can get advertisements relevant to you and your interests, and developers can know what to improve on.

The problem is when this is abused to hell and back by companies that want to strip you of every penny they possibly can, without giving you the choice.

 

One of my first blog posts in a while, I go over Google's recent web proposal, and point out exactly why it won't turn out well. Hope y'all have fun with it.

view more: next ›