this post was submitted on 04 Feb 2026
91 points (98.9% liked)
Linux
12090 readers
377 users here now
A community for everything relating to the GNU/Linux operating system (except the memes!)
Also, check out:
Original icon base courtesy of lewing@isc.tamu.edu and The GIMP
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
TL;DR:
When you delete in VS Code it stores the files in
Which isn't automatically emptied by gnome like ~/.local/share/Trash
Updating the package also creates new copies of this directory under a new version, leaving orphaned files/directories which contain data that you deleted.
Honestly this should be treated as a security vulnerability as well as a general bug, no?
The lines get kind of blurry, it's a bug that allows people executing code as your user(not sure the specifics of snap's security) to see things that you thought you deleted.
This doesn't give an attacker anything particularly useful. If they have that level of privileged already there are much more fruitful avenues of attack that don't require digging through your trash.
Fair enough. I just operate under the assumption deleted means deleted, I'd never toss Auth keys in userspace but I could absolutely see myself placing them temporarily in scripts I'd delete later.