17 Mar
2017
17 Mar
'17
6:39 p.m.
Larry McVoy <lm(a)mcvoy.com> wrote:
|On Fri, Mar 17, 2017 at 12:04:57AM +0100, Josh Good wrote:
|> On 2017 Mar 15, 09:40, Kurt H Maier wrote:
|>> Your usage habits are not natural laws. I'm a systems administrator
|>> too, and I use X11 forwarding every single day, on dozens of different
|>> programs.
...
|> I don't use X11 forwarding because it works bad/slow over WAN links,
...
|I'm a huge X11 fan, use remote display all the time (I'm reading this
|mail on slovax.mcvoy.com but I'm on a laptop so when mutt needs to
|display a photo or a word doc or whatever, that's all remote X over
|wifi, it "works" well enough that I use it a lot).
And it makes it possible to run browsers in a separate KVM into
which you log in with X11 forwarding enabled, for very insecure
things, and if your machine is strong enough. Matthew Dillon of
DragonflyBSD posted[1] a nice recipe of separating privileges via
several different user accounts on the same machine (as in "ssh
dfw1 at localhost -n \"setenv DISPLAY :0.0; firefox\""), onto
which i added the additional KVM separation; a pain on my small
box with todays internet, however. But possible. And i am hoping
for improved virtual graphics, they are working on that!
--steffen