Why does the notepad app do anything but edit text?
They added markup so now links work.
Feature creep.
Creature feep
Well, it was bad at that too. Until they vibe-coded it to a Wordpad2.
Improper neutralization of special elements used in a command (‘command injection’) in Windows Notepad App allows an unauthorized attacker to execute code over a network.
An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad, causing the application to launch unverified protocols that load and execute remote files.
TIL notepad can render markdown
I hate the absolute misuse of the RCE definition. An RCE used to not have any user interaction.
Damn, poor windows users… Just kidding lmao
Btw, ycombinator supports no activitypub? I think it would fit well.
8.8 CVSS
Vibecoding (and Resumé-driven dev) doing it’s thing.
Btw, Metapad is still around and portable. And so are Notepad 2/3/4/++.
Well notepad++ hasn’t been looking great https://notepad-plus-plus.org/news/hijacked-incident-info-update/
Jesus, WOW
