wayland-keylogger VS wyng-backup

Intercepting inputs meant for other apps is easy and it's already been done via LD_PRELOAD.

And all of this just for supposedly better "security", that can easily circumvented with trivial attacks.

Not in the same sense that there's a keylogger included with Windows, no. It's that it's easier to do on Xorg as opposed to Wayland. This isn't to say that it's impossible, however.

You can have keylogger on Wayland also without root priviledge. It's trivial: https://github.com/Aishou/wayland-keylogger

> you can still deliver different experiences at runtime — but you’re not likely to have the superuser privileges needed to run a leylogger or read ~/.ssh/id_rsa, etc, at that point.

Keyloggers are trivial to do in userspace Linux via LD_PRELOAD attacks[0], and typically your user account has permission to read ~/.ssh/id_rsa.

[0] https://github.com/Aishou/wayland-keylogger

I have read that bare Linux is totally insecure (https://github.com/Aishou/wayland-keylogger) unless you use some means of sandboxing. That's why I have been reading a lot about firejail, AppArmor, Tomoyo, etc.

For people who don't want to use ZFS but are okay with LVM: wyng-backup (formerly sparsebak)

https://github.com/tasket/wyng-backup

Tasket/wyng-backup: Fast Time Machine-like backups for logical volumes\ (3 comments)

Backups: This is a major problem for internet-isolated VMs. For internet-isolated VMs, I use this tool: https://github.com/tasket/wyng-backup. But it does only backup the Qube from the shutdown state. The Qube doesn't need to be shutdown, but it doesn't use the live volume. (You can actually run it on live volumes, but it's not supported for that.) In internet-connected VMs, I just use restic or borg. You're right that an offline backup solution is actually more complicated in this regard. The simple way of attaching a USB drive will only attach to one Qube at a time. Now there should be a way to attach the USB drive to only a backup qube, and do some sort of passthrough between the Qubes, but I don't know exactly how to do this.