Live data from Hacker News

Switching to the i3 window manager

vincent.bernat.ch

1–10 of 88 posts

Re: Switching to the i3 window manager

#5

A very nice addition to i3 is pass, the paswordmanager which comes with passmenu that lets you read and autotype passwords with dmenu.

I never, ever use these autotyping features; they are a security risk. Is my paranoia justified?

As far as I can assess this, I believe it is safer to do this instead of copying to the clipboard. The clipboard might be read by a malicious process while autotype with passmeni will only pipe the password to xdotool and that will generate keystrokes. it's only important to have the correct field selected before autotyping or you might end up googling your password :)

Re: Switching to the i3 window manager

#6

Earlier quoted context omitted.

I never, ever use these autotyping features; they are a security risk. Is my paranoia justified?

As far as I can assess this, I believe it is safer to do this instead of copying to the clipboard. The clipboard might be read by a malicious process while autotype with passmeni will only pipe the password to xdotool and that will generate keystrokes. it's only important to have the correct field selected before autotyping or you might end up googling your password :)

A malicious process could also do many other things. I think the most likely vector for autotyping attacks is simple phishing / clickjacking.

Re: Switching to the i3 window manager

#7

A very nice addition to i3 is pass, the paswordmanager which comes with passmenu that lets you read and autotype passwords with dmenu.

I never, ever use these autotyping features; they are a security risk. Is my paranoia justified?

I don't think so.

https://security.stackexchange.com/a/171916/257701

Re: Switching to the i3 window manager

#8
Some of these things (compositor, notably) come by default if you use Sway, which is an i3 compatible reimplementation of i3 written in rust for Wayland.

If there’s interest I could do a similar breakdown of my sway config, as certain software is X11 only (rofi, notably) but there are fantastic wayland native replacements.

Re: Switching to the i3 window manager

#9
post #8

Some of these things (compositor, notably) come by default if you use Sway, which is an i3 compatible reimplementation of i3 written in rust for Wayland. If there’s interest I could do a similar breakdown of my sway config, as certain software is X11 only (rofi, notably) but there are fantastic wayland native replacements.

Sway is written in C, though.
Post reply on HN