WINDOWS NOTEPAD APP REMOTE CODE EXECUTION VULNERABILITY

[cameron_bosch@floss.social]

@solonovamax It's insane that what should have been such a simple text editor application becoming so bloated that it gained security vulnerabilities to this degree! 😬

[freya@chaosfem.tw]

@solonovamax W H A T

[solonovamax@tech.lgbt]

@freya ya

[0x4d6165@wanderingwires.net]

@solonovamax monopoly lets you get away with so much

[freya@chaosfem.tw]

@solonovamax I wish, I really wish, I could get the fuck off windows

[infoseepage@mastodon.social]

@solonovamax I want old Notepad back, the Notepad that is just an EXTREMELY basic text editor.

[solonovamax@tech.lgbt]

@Infoseepage apparently it's still there in system32

[cataclock@wetdry.world]

@solonovamax In... in a text editor? wh- what!?

What a time to be alive

[obfusk@tech.lgbt]

@solonovamax "An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad, causing the application to launch unverified protocols that load and execute remote files." ah

[woeisme@mk.absturztau.be]

@solonovamax@tech.lgbt how do you fuck up a text editor THAT BADLY

[kiloku@burnthis.town]

@solonovamax "An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad, causing the application to launch unverified protocols that load and execute remote files."

Why have they made their plaintext editor render markdown??

[groupnebula563@mastodon.social]

@solonovamax hang on WHAT

[memdmp@catgirl.center]

@solonovamax@tech.lgbt

[infinimatt@hci.social]

@kemona_halftau @solonovamax notepad -> naughtypad

[eleanor@tech.lgbt]

@solonovamax @memdmp best thing this one has ever seen on fedi.

[memdmp@catgirl.center]

@Kiloku@burnthis.town @solonovamax@tech.lgbt let's all be honest, when we think of a basic plaintext editor, we all think it's in direct competition with tools like iotas, or even obsidian or nextcloud notes

[octaviaconamore@cutie.city]

@solonovamax @Stellar this needs sooo many facepalms, but here's one for now

[memdmp@catgirl.center]

@solonovamax@tech.lgbt this file went all the way from audacity recording to mp2 to mp3 and then to fedi

[colin_cz@mastodon.social]

@solonovamax How can they screw up a fucking notepad? it's just supposed to store a few fucking letters and nothing else

[anselmschueler@ieji.de]

@solonovamax this seems like it's just clicking a malicious link with a weird protocol. does the attacker need to have a specific protocol handler installed? why is this not exploitable from other apps that display untrusted links?