Re: Almost offtopic question to the "Improving Browser Security" question

On 2015-03-03, someone wrote: > Wow, copying the .Xauthority to the "separated" user worked! > > But I'm still thinking that the "separated" user can give out the command: > > xinput test 6 > > and can see what anyone types in via X. See xauth(1) about generating an untrusted auth token. If you'r

Re: Almost offtopic question to the "Improving Browser Security" question

http://blogs.gnome.org/alexl/2015/02/17/first-fully-sandboxed-linux-desktop-app/ h, great, looks like X is not soo good regarding security.. maybe Wayland.. On Tue, Mar 3, 2015 at 6:09 PM, someone wrote: > Wow, copying the .Xauthority to the "separated" user worked! > > But I'm still thinki

Re: Almost offtopic question to the "Improving Browser Security" question

Wow, copying the .Xauthority to the "separated" user worked! But I'm still thinking that the "separated" user can give out the command: xinput test 6 and can see what anyone types in via X. On Tue, Mar 3, 2015 at 5:56 PM, Ryan Freeman wrote: > On Tue, Mar 03, 2015 at 05:51:27PM +0100, someon

Re: Almost offtopic question to the "Improving Browser Security" question

On Tue, Mar 03, 2015 at 05:51:27PM +0100, someone wrote: > Hello, > > If I: > > pkg_add firefox-esr > > then I cannot see any separated user for it: > > grep -i firefox /etc/passwd > > When will OpenBSD have a separated user for the webbrowser by default? I think Ted specifically stated that

Almost offtopic question to the "Improving Browser Security" question

Hello, If I: pkg_add firefox-esr then I cannot see any separated user for it: grep -i firefox /etc/passwd When will OpenBSD have a separated user for the webbrowser by default? If someone gets in via the webbrowser... it will have the id_rsa, the *.kdb, etc. If it will not be default wha