I just found out about xinput and how it proves any gui's running on the same x-session can sniff each other.
Is there a support team for each app included in the Ubuntu repo's that checks for sniff code? I can imagine there must be specific libraries and commands in respective languages in the source that would identify sniffing attempts.
If we are protected from these sort of apps for the most part, the only other thing I can think of are networking apps. For example, scripts that may launch inside of Firefox that ships with Ubuntu. Does the end user have to install a Firefox add-on to actually get a sniffer inside of Ubuntu or could just some script from a webpage inject sniffing of the x-session? Or both?
Should we be concerned with torrent programs such as Transmission or Deluge?
Is there anyway to log processes that are getting keyboard, mouse, x-screen events to know what is paying attention?