WARNING: Global themes and widgets created by 3rd party developers for Plasma can and will run arbitrary code. You are encouraged to exercise extreme caution when using these products.
You are only browsing one thread in the discussion! All comments are available on the post page.
Are we all forgetting rm -rf has the –no-preserve-root safeguard? The accidental engine DataSource culprit seems unlikely. You can experiment yourself with in VM. It’s only a couple lines of QML code. Nothing will happen without explicitly turning off safety.
The pling account that posted the theme was registered on February 25 2024. And suddently it has 3800 downloads without anyone else saying anything?
Things aren’t adding up. I think this had to be intentional malicious crafted code.
Unless you have your root dir mounted in your home directory! Thanks btrfs. It might be protect by permissions but I wiped a whole disk without –no_preserve_root. It hurts being too clever sometimes. dink meme