KDE advises extreme caution after theme wipes Linux user's files

Gandalf_The_Grey · Mar 21, 2024

On Wednesday, the KDE team warned Linux users to exercise "extreme caution" when installing global themes, even from the official KDE Store, because these themes run arbitrary code on devices to customize the desktop's appearance.

The KDE Store currently allows anyone to upload new themes and various other plugins or add-ons without any checks for malicious behavior.

However, as KDE said, it currently lacks the resources to review the code used by each global theme submitted for inclusion in its official store. If the themes are faulty or malicious, this can result in unexpected consequences.

"Global themes and widgets created by 3rd party developers for Plasma can and will run arbitrary code. You are encouraged to exercise extreme caution when using these products," KDE cautioned.

"Global themes do not only change the look of Plasma, but also the behavior. To do this they run code, and this code can be faulty, as in the case mentioned above. The same goes for widgets and plasmoids."
Click to expand...

KDE advises extreme caution after theme wipes Linux user's files (bleepingcomputer.com)

xxJackxx · Mar 21, 2024

Ouch... (from the same referenced article)

"It executes rm -rf on your behalf [and] deletes all personal data immediately. No questions asked," the KDE user warned. "I canceled this when it asked for my root password, but it was too late for my personal data. All drives mounted under my user were gone, down to 0 bytes. [G]ames, configurations, browser data, [and the] home folder [are] all gone."
Click to expand...

Log in or Sign up

KDE advises extreme caution after theme wipes Linux user's files

Gandalf_The_Grey Registered Member

xxJackxx Registered Member

Log in or Sign up

KDE advises extreme caution after theme wipes Linux user's files

Gandalf_The_Grey Registered Member

xxJackxx Registered Member

Useful Searches