There was something written lately about how X does not do isolation, at all, easily letting people capture keyboard input that was being typed into a terminal during the sudo prompt.
A screensaver would not be immune to this as well when run in userland, in fact the same session.
I think there should be more isolations in place for cases like this.
That's incorrect - the screensaver is able to perform a full grab and prevent any keys being passed through to other apps. Which is why the screensaver won't trigger if you have a menu open.
A screensaver would not be immune to this as well when run in userland, in fact the same session.
I think there should be more isolations in place for cases like this.