We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control
deepmind.google·6d ago
AI Engineering
Lobsters·Jun 25·5 min read
Are We GlobalShortcuts Yet?
TL;DR
Applications on Wayland face a security issue where some bypass sandboxing by requesting full input monitoring instead of using GlobalShortcuts. GlobalShortcuts is an XDG Desktop Portal implementation that allows apps to register global keyboard shortcuts securely.
✦ Why It Matters
Engineers can prioritize implementing GlobalShortcuts to enhance application security and user privacy.
Key Takeaways
- Encourage adoption of GlobalShortcuts in applications.
- Track application support for better security practices.
- Submit pull requests to update application progress.
- Educate users on the importance of application permissions.
Full Summary
Wayland, a modern display server protocol, enhances security by sandboxing applications, but some apps compromise this by seeking full input monitoring permissions. GlobalShortcuts, an implementation of the XDG Desktop Portal, allows applications to register global keyboard shortcuts without needing direct access to all user input events, thus maintaining user security.
The initiative tracks the integration progress of GlobalShortcuts across various applications, encouraging developers to adopt this secure method. By cataloging which applications support GlobalShortcuts, the project highlights a shift towards a 'least privilege' model, where apps operate with minimal permissions necessary.
Users can contribute to this effort by submitting pull requests to update the application catalog. This tracking not only promotes security but also informs users about which applications respect their privacy.
The implications for engineers include a clearer understanding of secure application design and user trust.