WINDOWS NOTEPAD APP REMOTE CODE EXECUTION VULNERABILITY

[cataclock@wetdry.world]

@solonovamax In... in a text editor? wh- what!?

What a time to be alive

[obfusk@tech.lgbt]

@solonovamax "An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad, causing the application to launch unverified protocols that load and execute remote files." ah

[woeisme@mk.absturztau.be]

@solonovamax@tech.lgbt how do you fuck up a text editor THAT BADLY

[kiloku@burnthis.town]

@solonovamax "An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad, causing the application to launch unverified protocols that load and execute remote files."

Why have they made their plaintext editor render markdown??

[groupnebula563@mastodon.social]

@solonovamax hang on WHAT

[memdmp@catgirl.center]

@solonovamax@tech.lgbt

[infinimatt@hci.social]

@kemona_halftau @solonovamax notepad -> naughtypad

[eleanor@tech.lgbt]

@solonovamax @memdmp best thing this one has ever seen on fedi.

[memdmp@catgirl.center]

@Kiloku@burnthis.town @solonovamax@tech.lgbt let's all be honest, when we think of a basic plaintext editor, we all think it's in direct competition with tools like iotas, or even obsidian or nextcloud notes

[octaviaconamore@cutie.city]

@solonovamax @Stellar this needs sooo many facepalms, but here's one for now

[memdmp@catgirl.center]

@solonovamax@tech.lgbt this file went all the way from audacity recording to mp2 to mp3 and then to fedi

[colin_cz@mastodon.social]

@solonovamax How can they screw up a fucking notepad? it's just supposed to store a few fucking letters and nothing else

[anselmschueler@ieji.de]

@solonovamax this seems like it's just clicking a malicious link with a weird protocol. does the attacker need to have a specific protocol handler installed? why is this not exploitable from other apps that display untrusted links?

[solonovamax@tech.lgbt]

@memdmp mp2????

[memdmp@catgirl.center]

@solonovamax@tech.lgbt thats right, to make it more compressed sounding i took out the MPEG-2 Audio Layer II for this bitch

[jennyfluff@chitter.xyz]

@solonovamax bingo anyone?

[memdmp@catgirl.center]

@solonovamax@tech.lgbt then back to mp3 for compatibility with fedi

[malachai@furry.engineer]

@freya what's stopping you? Linux is here to love you. :P

[freya@chaosfem.tw]

@malachai accessibility, or the lack thereof

[freya@chaosfem.tw]

@malachai also uh............. UI stability. or the lack thereof. finally decide on one desktop, one UI toolkit, one everything, and things might start actually working