WINDOWS NOTEPAD APP REMOTE CODE EXECUTION VULNERABILITY

[groupnebula563@mastodon.social]

@solonovamax hang on WHAT

[memdmp@catgirl.center]

@solonovamax@tech.lgbt

[infinimatt@hci.social]

@kemona_halftau @solonovamax notepad -> naughtypad

[eleanor@tech.lgbt]

@solonovamax @memdmp best thing this one has ever seen on fedi.

[memdmp@catgirl.center]

@Kiloku@burnthis.town @solonovamax@tech.lgbt let's all be honest, when we think of a basic plaintext editor, we all think it's in direct competition with tools like iotas, or even obsidian or nextcloud notes

[octaviaconamore@cutie.city]

@solonovamax @Stellar this needs sooo many facepalms, but here's one for now

[memdmp@catgirl.center]

@solonovamax@tech.lgbt this file went all the way from audacity recording to mp2 to mp3 and then to fedi

[colin_cz@mastodon.social]

@solonovamax How can they screw up a fucking notepad? it's just supposed to store a few fucking letters and nothing else

[anselmschueler@ieji.de]

@solonovamax this seems like it's just clicking a malicious link with a weird protocol. does the attacker need to have a specific protocol handler installed? why is this not exploitable from other apps that display untrusted links?

[solonovamax@tech.lgbt]

@memdmp mp2????

[memdmp@catgirl.center]

@solonovamax@tech.lgbt thats right, to make it more compressed sounding i took out the MPEG-2 Audio Layer II for this bitch

[jennyfluff@chitter.xyz]

@solonovamax bingo anyone?

[memdmp@catgirl.center]

@solonovamax@tech.lgbt then back to mp3 for compatibility with fedi

[malachai@furry.engineer]

@freya what's stopping you? Linux is here to love you. :P

[freya@chaosfem.tw]

@malachai accessibility, or the lack thereof

[freya@chaosfem.tw]

@malachai also uh............. UI stability. or the lack thereof. finally decide on one desktop, one UI toolkit, one everything, and things might start actually working

[jackemled@furry.engineer]

@solonovamax it's not April yet what the fuck

[apophis@kill-corporations.enterprises]

@solonovamax i was going to ask if you were joking but the omfg answers that

[0x00string@infosec.exchange]

@solonovamax remote code execution or local command injection? the cve seems confused. either way lol

[apophis@kill-corporations.enterprises]

@solonovamax like it's just days ago we learn about the np++ update breach and like did MS feel an inferiority complex or what