Created attachment 176128 [details] possible malicious code inject *** If you're not sure this is actually a bug, instead post about it at https://discuss.kde.org If you're reporting a crash, attach a backtrace with debug symbols; see https://community.kde.org/Guidelines_and_HOWTOs/Debugging/How_to_create_useful_crash_reports Please remove this comment after reading and before submitting - thanks! *** SUMMARY STEPS TO REPRODUCE 1. 2. 3. Hi, I'm new to this so please forgive my process ignorance: The attached are Netguard firewall screenshots of KDE Connect (F-droid) on my Pixel 6Pro. My concern is the app tries to connect to datamining.nadeko.net and inv.nadeko.net (invidious instance). Malicious inject? F-droid issue? Linux [toy] box: Operating System: Fedora Linux Asahi Remix 40 KDE Plasma Version: 6.2.3 KDE Frameworks Version: 6.8.0 Qt Version: 6.7.2 Kernel Version: 6.11.8-400.asahi.fc40.aarch64+16k (64-bit) Graphics Platform: Wayland Processors: 8 × Apple Firestorm (M1 Max), 2 × Apple Icestorm (M1 Max) Memory: 62.6 GiB of RAM Graphics Processor: Apple M1 Max Product Name: Apple MacBook Pro (16-inch, M1 Max, 2021)
I have raised this issue in the nadeko.net Matrix Room and the owner says they will try this since they also use KDE Connect. CC: Fijxu (nadeko.net's owner)
Old report but still worth investigating. Why does KDE Connect connects to my site? I installed NetGuard for testing, filtered and logged the traffic of KDE Connect. I also installed https://addons.mozilla.org/en-US/firefox/addon/plasma-integration/ to be able to send links from the browser directly to the phone. I sent a link from https://inv.nadeko.net from the browser on the PC to the phone and it opened the browser of the phone with the site as intended, but there is no connections from KDE Connect to external websites. Why does it connects to my website in this bug report? I'm missing some feature of KDE Connect that makes it connect to a website? Still, if it connected to `inv.nadeko.net`, it should not connect to `datamining.nadeko.net` at all, unless you connect to `git.nadeko.net` first.