* Sam Morris: >> X is not a >> secure protocol and with access to your X server a program can wreak >> havoc on anything you do on that X server including capturing passwords >> and other sensitive data. It's not an issue specific to this >> vulnerability. > > Isn't the X11 security extension designed to help with these issues? To me, it looks too much like an afterthought. It's probably not that robust. 8-(