A user has had a bad experience installing a global theme on Plasma and lost personal data.
Global themes do not only change the look of Plasma, but also the behavior. To do this they run code, and this code can be faulty, as in the case mentioned above. The same goes for widgets and plasmoids.
We are calling on the community to help us locate and quarantine defective software by using the “Report” buttons available on each item in the KDE Store.
Please see this linked image to locate them.
Nevertheless, this will take time and resources. We recommend all users to be careful when installing and running software not provided directly by KDE or your distros.
And remember to report any faulty products you find!
Are we all forgetting
rm -rf
has the--no-preserve-root
safeguard? The accidentalengine
DataSource culprit seems unlikely. You can experiment yourself with in VM. It’s only a couple lines of QML code. Nothing will happen without explicitly turning off safety.The pling account that posted the theme was registered on February 25 2024. And suddently it has 3800 downloads without anyone else saying anything?
Things aren’t adding up. I think this had to be intentional malicious crafted code.
How will it help saving the important data that’s in /home?
Unless you have your root dir mounted in your home directory! Thanks btrfs. It might be protect by permissions but I wiped a whole disk without![dink meme](https://lemmy.kya.moe/imgproxy?src=www.memesmonkey.com%2fimages/memesmonkey/9b/9bc662b38ef9b42e1ef496921fe1b7db.jpeg)
--no_preserve_root
. It hurts being too clever sometimes.