Beehaw
  • Communities
  • Create Post
  • search
    Search
  • Login
  • Sign Up
 wisha   ( @wisha@lemmy.ml )  to Linux@lemmy.ml · 2 years ago

Malicious KDE theme can wipe out all your data

www.reddit.com

external-link
message-square
19
link
fedilink
  • cross-posted to:
  • linuxfurs@pawb.social
  • kde@lemmy.kde.social
125
external-link

Malicious KDE theme can wipe out all your data

www.reddit.com

 wisha   ( @wisha@lemmy.ml )  to Linux@lemmy.ml · 2 years ago
message-square
19
link
fedilink
  • cross-posted to:
  • linuxfurs@pawb.social
  • kde@lemmy.kde.social
Blocked
www.reddit.com
external-link

cross-posted from: https://lemmy.ml/post/13397700

Malicious KDE theme can wipe out all your data

Or is it just buggy?

  •  jaxil6   ( @jaxil6@futurology.today ) 
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 years ago

    I thought wayland was supposed to improve security. Were the past 18 years a lie?

    •  Klara   ( @boo_@lemmy.blahaj.zone ) 
      link
      fedilink
      arrow-up
      4
      ·
      2 years ago

      This is different from the Wayland security model, as Wayland restricts the ability for clients to modify and read from other clients arbitrarily. This is an extension to a Wayland compositor, and as all extensions do, it contains code which runs on your system. Any code, unless sandboxed, can access your filesystem no matter if it’s run under Wayland, X11, or no windowing system at all for that matter.

      •  Zamundaaa   ( @Zamundaaa@discuss.tchncs.de ) 
        link
        fedilink
        English
        arrow-up
        3
        ·
        2 years ago

        It is not related to Wayland or the compositor in any way. This is a plasmashell extension.

        Similar caveats do apply to KWin scripts and effects though

    •  ProgrammingSocks   ( @ProgrammingSocks@pawb.social ) 
      link
      fedilink
      arrow-up
      4
      ·
      2 years ago

      Bro does not know what a display server does

      •  jaxil6   ( @jaxil6@futurology.today ) 
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 years ago

        They should be more specific. This is just false advertising.

        •  baseless_discourse   ( @baseless_discourse@mander.xyz ) 
          link
          fedilink
          arrow-up
          5
          ·
          edit-2
          1 year ago

          deleted by creator

        •  ProgrammingSocks   ( @ProgrammingSocks@pawb.social ) 
          link
          fedilink
          arrow-up
          1
          ·
          2 years ago

          Wayland isn’t a product. You’re gonna have to get your mind out of capitalism to understand the free software community.

          •  jaxil6   ( @jaxil6@futurology.today ) 
            link
            fedilink
            English
            arrow-up
            2
            ·
            2 years ago

            >muh capitalism
            Ok commie

            •  ProgrammingSocks   ( @ProgrammingSocks@pawb.social ) 
              link
              fedilink
              arrow-up
              1
              ·
              2 years ago

              You’re literally on a communist instance of Lemmy.

    •  ReversalHatchery   ( @ReversalHatchery@beehaw.org ) 
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 years ago

      It does, when the bad actor is a program you run, and other open windows contain sensitive content.

      Here the bad actor is code being loaded as an extension to the compositor. A bit like a kernel module, which can bypass file access permissions if it wants.

Linux@lemmy.ml

linux@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !linux@lemmy.ml

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

  • Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
  • No misinformation
  • No NSFW content
  • No hate speech, bigotry, etc

Related Communities

  • !opensource@lemmy.ml
  • !libre_culture@lemmy.ml
  • !technology@lemmy.ml
  • !libre_hardware@lemmy.ml

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 193 users / day
  • 862 users / week
  • 2.32K users / month
  • 7.3K users / 6 months
  • 1.3K local subscribers
  • 60.2K subscribers
  • 7.28K Posts
  • 96.6K Comments
  • Modlog
  • mods:
  •  AgreeableLandscape   ( @AgreeableLandscape@lemmy.ml ) 
  •  nooter692   ( @nooter692@lemmy.ml ) 
  •  MarcellusDrum   ( @MarcellusDrum@lemmy.ml ) 
  •  Arthur Besse   ( @cypherpunks@lemmy.ml ) 
  •  Cyclohexane   ( @cyclohexane@lemmy.ml ) 
  •  d3Xt3r   ( @d3Xt3r@lemmy.nz ) 
  • BE: 0.19.13
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code