On Thu, 25 May 2017 08:40:04 +0900 Carsten Haitzler (The Rasterman) <[email protected]> wrote:
> On Wed, 24 May 2017 17:33:36 -0400 "William L. Thomson Jr." > <[email protected]> said: > > > Another requirement for pinentry is to grab keyboard and mouse. Mike > > did this originally in his version. However its using ecore_x > > specific code. Like the other ecore_x_init issue. > > also wayland doesn't even allow grabbing of the kbd or mouse. it's > considered a highly unsocial thing to do to block a user out of > everything else with their input elsewhere. I agree, but there is another side of the coin as well. Not security related, and I have read past posts on such. No more clock debates :) I do not like this scenario. I see things the opposite as I will state. Both are valid scenarios. As such pinentry can be configured both ways, grab or no grab. Like a woman :) You have chat client running. You are typing in your passphrase or some pin, etc. Some chat dialog pops up, grabs focus, and you are typing in that now. Possibly showing characters you may want hidden. My gripe is the opposite. I am typing in some window, with a script running in another. That script invokes git commit, which causes pinentry to pop up. It grabs my keyboard and now I am typing in the wrong window. Though sometimes it pops up and I forget and it times out, that sucks! Its the same problem either way. I say do not have a chat or something running that will pop up windows when you are typing in such. But others would say the opposite. Its valid both ways. > i don't see how it is a REQUIREMENT. such a password entry dialog can > work just fine without any explicit grabbing of keyboard or mouse. > the grabs sure are not a security mechanism as they do not guarantee > input is not faked. so what is the actual REQUIREMENT (this thing > can't function correctly without grabbing keyboard and mouse)? I know, and I tried to start a discussion on such. Oddly enough Mike preferred the grab approach. That was in his version[1] of EFL pinentry and not mine[2]. We even discussed it and differed. This was a request from gnupg devs and I mentioned I had brought such up on list[3]. Which still has not had any discussion and I need to bring up again. It seems only GTK is doing that. The QT versions, QT4/5 do not grab keyboard or mouse. That was new to me when using the GTK version. Which is what both Mike and I used as a basis and reference. I am going to make the argument that for now the EFL version cannot/will not support grab until Wayland does. That way it will not crash under either. If I can get it to run under Wayland, per the issues in the other thread. 1. https://github.com/Obsidian-StudiosInc/pinentry 2. https://github.com/Obsidian-StudiosInc/pinentry/tree/zmike/efl 3. https://lists.gnupg.org/pipermail/gnupg-devel/2017-April/032820.html -- William L. Thomson Jr.
pgpeET2Ay7k3s.pgp
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ enlightenment-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/enlightenment-devel
