KDE

5018 readers

89 users here now

KDE is an international technology team creating user-friendly free and open source software for desktop and portable computing. KDE’s software runs on GNU/Linux, BSD and other operating systems, including Windows.

Plasma 6 Bugs

If you encounter a bug, proceed to https://bugs.kde.org, check whether it has been reported.

If it hasn't, report it yourself.

PLEASE THINK CAREFULLY BEFORE POSTING HERE.

Developers do not look for reports on social media, so they will not see it and all it does is clutter up the feed.

founded 1 year ago

MODERATORS

[email protected]

Malicious KDE theme can wipe out all your data (www.reddit.com)

submitted 5 months ago* (last edited 5 months ago) by [email protected] to c/[email protected]

33 comments fedilink hide all child comments

Or is it just buggy?

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 1 points 5 months ago* (last edited 5 months ago)

Absolutely, and I would like to help with that.

But I think there are multiple parts to this:

Fix the backends so that for example dolphin extensions are directly installed in the correct way and dont even need such scripts
Restrict extensions and themes to be nonexecutable at least by default
Involve the community to mark "dangerous addons" that need executable scripts to install themselves or work; and to report malicious addons; and to add an enforced test before the addon is published

Of course a dolphin extension always executes code. I think hiring a bunch of KDE users as pretesters could work, to enforce that every extension needs to be tested by the 2 community members to end up in the store. There could also always be a way to unhide untested addons etc.

And enforcing stricter guidelines for the extensions is also important of course