From mboxrd@z Thu Jan 1 00:00:00 1970 From: steffen@sdaoden.eu (Steffen Nurpmeso) Date: Fri, 17 Mar 2017 13:39:35 +0100 Subject: [TUHS] X, Suntools, and the like In-Reply-To: <20170317001331.GO5720@mcvoy.com> References: <4227EA32-12C2-46D1-B683-88812D1E5168@tfeb.org> <3B3776C9-1B22-4143-A4F5-0BEA13C79505@tfeb.org> <20170315164006.GC26286@wopr> <20170316230455.GA21805@naleco.com> <20170317001331.GO5720@mcvoy.com> Message-ID: <20170317123935.Zj3Be%steffen@sdaoden.eu> Larry McVoy wrote: |On Fri, Mar 17, 2017 at 12:04:57AM +0100, Josh Good wrote: |> On 2017 Mar 15, 09:40, Kurt H Maier wrote: |>> Your usage habits are not natural laws. I'm a systems administrator |>> too, and I use X11 forwarding every single day, on dozens of different |>> programs. ... |> I don't use X11 forwarding because it works bad/slow over WAN links, ... |I'm a huge X11 fan, use remote display all the time (I'm reading this |mail on slovax.mcvoy.com but I'm on a laptop so when mutt needs to |display a photo or a word doc or whatever, that's all remote X over |wifi, it "works" well enough that I use it a lot). And it makes it possible to run browsers in a separate KVM into which you log in with X11 forwarding enabled, for very insecure things, and if your machine is strong enough. Matthew Dillon of DragonflyBSD posted[1] a nice recipe of separating privileges via several different user accounts on the same machine (as in "ssh dfw1 at localhost -n \"setenv DISPLAY :0.0; firefox\""), onto which i added the additional KVM separation; a pain on my small box with todays internet, however. But possible. And i am hoping for improved virtual graphics, they are working on that! --steffen