KDE

5253 readers

75 users here now

KDE is an international technology team creating user-friendly free and open source software for desktop and portable computing. KDE’s software runs on GNU/Linux, BSD and other operating systems, including Windows.

Plasma 6 Bugs

If you encounter a bug, proceed to https://bugs.kde.org, check whether it has been reported.

If it hasn't, report it yourself.

PLEASE THINK CAREFULLY BEFORE POSTING HERE.

Developers do not look for reports on social media, so they will not see it and all it does is clutter up the feed.

founded 1 year ago

MODERATORS

[email protected]

Malicious KDE theme can wipe out all your data (www.reddit.com)

submitted 7 months ago* (last edited 7 months ago) by [email protected] to c/[email protected]

13 comments fedilink hide all child comments

Or is it just buggy?

all 14 comments

sorted by: hot top controversial new old

[–] mvirts 14 points 7 months ago

Great time to mention tools like testdisk that can easily recover data that has been recently deleted on common filesystems.

[–] [email protected] 8 points 7 months ago

This is why we need sandboxing. Right now the Linux desktop is still lacking in terms of security

[–] [email protected] 7 points 7 months ago

Not malicious. Just buggy -- a downright nasty bug, but a bug.

[–] [email protected] 3 points 7 months ago (1 children)

Reading the comments, looks like bad/old code mixed with a big update rather than anything malicious. I even ran into themes that killed my KDE last night. Had to purge the configs themes to get it working. Damn glad I didn't wipe my entire setup.

[–] [email protected] 4 points 7 months ago

Correct. The theme creator missed a variable that is not part of the Plasma environment anymore, and instead of running

rm -Rf [something]

it run

rm -Rf

😬

[–] [email protected] 2 points 7 months ago (1 children)

Extensions need to follow standards, and be installed as non-executable files in defined categories.

Everything else has to be removed or behind a huge warning.

[–] [email protected] 5 points 7 months ago (2 children)

That is not possible. widgets and Global themes have to be able to execute code to work.

By the way: the code was not malicious, just badly written.

[–] [email protected] 1 points 7 months ago (1 children)

Why do global themes need to do that? Arent they just color and image files, maybe audio?

It doesnt really matter if the code was malicious or not, this should not be possible.

Another example of how damn insecure linux is. Just because its not the snap store, we dont have tons of malicious addons on pling.

[–] [email protected] 8 points 7 months ago

@Pantherina @Bro666

That is regular themes.

_Global_ themes also modify the desktop's behavior and hence contain code to do that.