Comment 21 for bug 155937

mjg59 comments:

"Yeah, that's an improvement. However, it still means that remote X clients can influence the input stream in a way they currently can't
Also, that any user with admin privileges can screw everyone else. Though given sudoers, that's a given.
 I dislike tying desktop functionality to an admin group, though. It encourages people to make normal users admins."

Timo adds that Synaptics is deprecated upstream. I'm afraid we need to just sit tight and wait for Xinput to become available in Ubuntu. But I will keep this bug open until that time - this is a common issue and there is some good analysis/patching in this bug, and while we won't be carrying this patch in the general distro due to security issues, the patch may be of interest to other Ubuntu users who can deal with or accept the security implications themselves in some fashion.