"Windows Notepad App Remote Code Execution Vulnerability"

[lmorchard@masto.hackers.town]

"Windows Notepad App Remote Code Execution Vulnerability"

That's it: I'm going back to AppleWorks, on my Apple IIe.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20841

[waynedixon@mastodon.social]

@lmorchard @catsalad if it was a local vulnerability, I’d probably think “yeah, that can happen to any app due to a library”, but a basic text editor should not have any remote capabilities.

[tiotasram@kolektiva.social]

@lmorchard @catsalad @waynedixon it mentions "trick the user into clicking a markdown link"

[wakame@tech.lgbt]

@waynedixon @lmorchard @catsalad

Regrettably, it's not a basic text editor, but the passion project of a vibe-enamored Microsoft intern.

[waynedixon@mastodon.social]

@tiotasram @lmorchard @catsalad and some people wonder why I don't jump into every single new technology and stick with something that people consider "antiquated"....

[synlogic4242@social.vivaldi.net]

@lmorchard lol. *tabs back to vim*

[theorangetheme@en.osm.town]

@lmorchard At this point, if your program can't work without Internet access, it's broken. "But the Web-" Idgaf. Shut it down.

[the_turtle@mastodon.sdf.org]

@lmorchard i taught a secretarial word processing class on exactly that setup in 1984 or 1985.

The old lady teaching a Wang VS word processing class down the hall sneered.

Apple is still around. Wang... ain't.

[bhtooefr@snack.social]

@tiotasram@kolektiva.social @lmorchard@masto.hackers.town @catsalad@infosec.exchange @waynedixon@mastodon.social honestly starting to wonder why this is a vuln and what they fixed

I'm assuming it's launching URIs through the Windows handler for them, and you'd get the same results passing the same URI into the Run dialog?

although Notepad supporting rich text including Markdown is a choice, and not one I would've made, but.

[gamesmissed@mastodon.social]

@lmorchard I wrote about a dozen letters last year in AppleWorks, on my Apple IIgs. With modern jiggery-pokery*, I can print to the Brother laser printer on the shelf. It's surprisingly relaxing to use an old word processor.

* https://www.colino.net/wordpress/surl-server-a-serial-proxy-for-8bit-computers/

[john_philip_bell@defcon.social]

@lmorchard
Wait?! Notepad opens markdown files... Who did that? Who asked for that.. There's markdown for "run this thing"?!?!

(corrected typo)
(corrected corrected typo)

[yakkoj@fosstodon.org]

@lmorchard it works for me if that's what I really need to do ;o)

[donhawkins@mastodon.social]

@lmorchard @inthehands Linux.

[jongary@macaw.social]

@lmorchard those were the days.

[pastathief@indiepocalypse.social]

@lmorchard Hmm. I like how you think, but I feel like AppleWorks on an Apple II would be one step too far for convenient use on a modern computer. Now, something like MicroGoldEd on the Amiga might be quite viable, since you can mount a host system's folder as a disk under FS-UAE, so you could actually use that to edit text files on the fly. For the AppleWorks version you'd have to move them back and forth to/from the Apple II emulator using ciderpress or, if you wanted to use actual hardware, you'd need to use ciderpress to manage a disk mounted to the Apple II over ADT. Doable, but lacking in spontenaiety.

I wonder if there's any magic one could do with the command-line switches available to FS-UAE and a special startup sequence launched from within the Amiga side that would let you associated the whole thing as a default text editor from the host system, though, so that if you double-clicked a .txt file, it would just launch the emulator, Amiga OS, and the text editor with your file loaded.