7 ms·
If you cannot audit it and supervise it, do not offer a point-and-click way to install it. Do not rely on end-users experience and sanity nor the good intention
by alekq 2y ago
If you cannot audit it and supervise it, do not offer a point-and-click way to install it. Do not rely on end-users experience and sanity nor the good intentions of random people online.
Installation of Gnome extensions or KDE themes (unless official package from distribution's repository is used) always seemed as unnecessary risk to me.
- ParetoOptimal 2y agoI posted an idea about sandboxing that I think is a middle ground between doing away entirely with the idea of gnome/kde extensions and themes using sandboxing: https://discuss.kde.org/t/sandbox-plasmoids-by-default-to-prevent-themes-from-deleting-home-directory-or-other-sensitive-data/12826 https://discuss.kde.org/t/sandbox-plasmoids-by-default-to-pr...