this post was submitted on 26 Mar 2024
71 points (93.8% liked)

Linux

48208 readers
773 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 15 points 7 months ago (1 children)

As a big fan of KDE Plasma, I feel like this is a huge blunder on their side, and am rather disappointed. I do hope they can move forward learning from this.

[–] [email protected] 3 points 7 months ago (2 children)

I wonder if it applies to GNOME extensions

[–] [email protected] 1 points 7 months ago (1 children)

GNOME extensions aren't themes, though. They're executable by design and intuition; they're basically applets.

However, GNOME does have themes (hidden in the GNOME-Tweaks app) and AFAIK they're purely CSS.

[–] [email protected] 1 points 7 months ago

Well then I wonder if a gnome extension could take over your machine and attack other machines on the network

[–] [email protected] 2 points 7 months ago (1 children)

Haven't heard anything like that. Doesn't mean for sure it's not there, but if it is we would've heard of it, considering how popular GNOME is.

[–] [email protected] 0 points 7 months ago (1 children)

If KDE can have it gnome certainly can

[–] [email protected] 3 points 7 months ago

In theory: yes.

In practice: depends on how things are implemented

The jump from v5 to v6 is quite a big one. It is understandable things can fall thru the cracks.

Nevertheless, allowing themes (especially of unknown source) to execute arbitrary code is never a good idea.