i'm calling it: any desktop env that doesn't use a compositor is a security liability waiting to happen. if you're still running gnome2 or something, what's wrong with you?