WINDOWS NOTEPAD APP REMOTE CODE EXECUTION VULNERABILITY
-
@solonovamax "An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad, causing the application to launch unverified protocols that load and execute remote files."
Why have they made their plaintext editor render markdown??
@Kiloku@burnthis.town @solonovamax@tech.lgbt let's all be honest, when we think of a basic plaintext editor, we all think it's in direct competition with tools like iotas, or even obsidian or nextcloud notes
-
WINDOWS NOTEPAD APP REMOTE CODE EXECUTION VULNERABILITY
@solonovamax @Stellar this needs sooo many facepalms, but here's one for now

-
@solonovamax@tech.lgbt this file went all the way from audacity recording to mp2 to mp3 and then to fedi
-
WINDOWS NOTEPAD APP REMOTE CODE EXECUTION VULNERABILITY
@solonovamax How can they screw up a fucking notepad? it's just supposed to store a few fucking letters and nothing else
-
@solonovamax this seems like it's just clicking a malicious link with a weird protocol. does the attacker need to have a specific protocol handler installed? why is this not exploitable from other apps that display untrusted links?
-
@solonovamax@tech.lgbt this file went all the way from audacity recording to mp2 to mp3 and then to fedi
@memdmp mp2????
-
@memdmp mp2????
@solonovamax@tech.lgbt thats right, to make it more compressed sounding i took out the MPEG-2 Audio Layer II for this bitch
-
WINDOWS NOTEPAD APP REMOTE CODE EXECUTION VULNERABILITY
@solonovamax bingo anyone?
-
@solonovamax@tech.lgbt thats right, to make it more compressed sounding i took out the MPEG-2 Audio Layer II for this bitch
@solonovamax@tech.lgbt then back to mp3 for compatibility with fedi
-
@solonovamax I wish, I really wish, I could get the fuck off windows
@freya what's stopping you? Linux is here to love you. :P
-
@freya what's stopping you? Linux is here to love you. :P
@malachai accessibility, or the lack thereof
-
@freya what's stopping you? Linux is here to love you. :P
@malachai also uh............. UI stability. or the lack thereof. finally decide on one desktop, one UI toolkit, one everything, and things might start actually working
-
@solonovamax it's not April yet what the fuck
-
OH MY FUCKING GOD
@solonovamax i was going to ask if you were joking but the omfg answers that -
@solonovamax remote code execution or local command injection? the cve seems confused. either way lol
-
@solonovamax i was going to ask if you were joking but the omfg answers that@solonovamax like it's just days ago we learn about the np++ update breach and like did MS feel an inferiority complex or what
-
@solonovamax "An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad, causing the application to launch unverified protocols that load and execute remote files."
Why have they made their plaintext editor render markdown??
@Kiloku @solonovamax lmao LOVE local user interaction bugs called RCE, this never dies
-
@malachai accessibility, or the lack thereof
@freya accessibility as in for disability? KDE Plasma has a massive accessibility suite. :) It's also very pretty and extremely configurable.
-
@malachai also uh............. UI stability. or the lack thereof. finally decide on one desktop, one UI toolkit, one everything, and things might start actually working
@freya I've been daily driving Ubuntu then cachyos for a long time with basically no issues that I didn't cause myself. Rock solid aside from some self-caused crashing
-
@freya accessibility as in for disability? KDE Plasma has a massive accessibility suite. :) It's also very pretty and extremely configurable.
@malachai it has many accessibility features, yes, unfortunately the screenreader (which is what I need) is a glitchy unstable mess, and modern UI frameworks make this worse, as does Wayland and Pipewire and suchlike. there's no large amount of funding going into Linux desktop accessibility, and it's such a moving target at this point that getting stable accessibility is really hard