Unverified50% confidenceFactExact time
X11 has no permission isolation mechanism; any client with access to the same X server can request to read the current clipboard content at any time and listen for clipboard ownership change events.
1
Sources
50%
Confidence
Long-term
Relevance
9/13/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedX11's design is based on the assumption that all programs running under the same X server are trusted, and therefore no isolation between clients was established.67% similarUnverified不应在系统层面给予 AI 工具无限制的文件访问权或直接暴露整个用户主目录55% similarUnverifiedResolving the Missing X-OpenCode-Session error requires adding the session header in the custom request headers section of the configuration file, with the Session value needing to be generated locally54% similarUnverifiedIn auto mode, a one-time prompt will appear before reading files outside the working directory for the first time, and users can block such reads via permissions.blockReadsOutsideWorkingDirectories.52% similarUnverifiedAUR存放的是PKGBUILD脚本而非编译好的二进制包，任何拥有AUR账号的用户都可以上传，没有官方仓库那样的Trusted User审核机制50% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/918251API
curl https://kongchang.com/api/v1/knowledge/claims/918251MCP
get_claim(id=918251)