Live data from Hacker News

Windows Notepad App Remote Code Execution Vulnerability

cve.org

201–210 of 538 posts

Re: Windows Notepad App Remote Code Execution Vulnerability

#201

I found a copy of the win98 (I believe) notepad.exe a while back, and it works perfectly on windows 11 (though the "about notepad" dialog shows the windows 11 version for some reason??). I can write text into it, save it, and load text again. What more does notepad need? And it has a very nostalgic font too

Apparently windows 11 still ships with classic notepad?

https://github.com/christian-korneck/classic-windows-notepad

Re: Windows Notepad App Remote Code Execution Vulnerability

#202
Actually, the big red flag for me was the removal of "My Computer". Folks, you might still think it's "your computer" but Microsoft clearly doesn't. You've got something they want and they will stop at nothing to take it from you.

This should be treated as an all-out war.

Re: Windows Notepad App Remote Code Execution Vulnerability

#203
post #121
post #105

Earlier quoted context omitted.

Embarrassing bugs are not RCEs. Also the industry should be more mature now, not less. But move fast and break things, I guess...

We have reached peak software stability, it's all gonna be downhill from here.

Peak software stability was Windows 7, that's why it's still used in industrial environments.

Re: Windows Notepad App Remote Code Execution Vulnerability

#204
post #166

Earlier quoted context omitted.

It’s just resumé driven development. Corporate droids gotta justify their salaries somehow. It doesn’t pay to call software “done”.

Microsoft is driving AI adoption. Why blame tge workers for this?

Microsoft is comprised of its workers.

Re: Windows Notepad App Remote Code Execution Vulnerability

#205
post #186

Earlier quoted context omitted.

Edit is ported to win11 and edit(.exe) should work in your shell of choice. https://learn.microsoft.com/en-us/windows/edit/

But... did they add a http server in it? Mail reader?

no, and the person at Microsoft that wrote it is adamant about keeping it as an editor only.

Re: Windows Notepad App Remote Code Execution Vulnerability

#206
post #37

A few days ago, Notepad++ got compromised—apparently by a state actor (or a proxy). And now, today, Windows’ built-in Notepad has a fresh CVE. What a life. At this point, what am I supposed to do other than uninstall Windows completely? No real sandboxing, a mountain of legacy…

I still use VIM in the terminal. So far, I'm fine, but I assume there's gonna be some inevitable CI/CD compromises sooner or later.

Re: Windows Notepad App Remote Code Execution Vulnerability

#207

Earlier quoted context omitted.

> nailing down Unicode and text encodings was still considered rocket science. Now this is a solved problem I wish… Detecting text encoding is only easy if all you need to contend with is UTF16-with-BOM, UTF8-with-BOM, UTF8-without-BOM, and plain ASCII (which is effectively also UTF8). As soon as you might see UTF16 or UCS without a BOM, or 8-bit codepages other than plain ASCII (many apps/libs assume that these are…

> to get Excel to correctly load a UTF8 encoded CSV or similar you must include the BOM Ah so that’s the trick! I’ve run into this problem a bunch of times in the wild, where some script emits csv which works on the developers machine but fails strangely with real world data. Good to know there’s a simple solution. I hope I remember your comment next time I see this!

Excel CSV is broken anyway, since in some (EU, ...) countries it needs ; as separator.

Re: Windows Notepad App Remote Code Execution Vulnerability

#208
post #186

Earlier quoted context omitted.

Edit is ported to win11 and edit(.exe) should work in your shell of choice. https://learn.microsoft.com/en-us/windows/edit/

But... did they add a http server in it? Mail reader?

Rewrote it in Rust

Re: Windows Notepad App Remote Code Execution Vulnerability

#209

Earlier quoted context omitted.

I extracted out notepad.exe, calc.exe and mspaint.exe from Windows 7. I use them on Windows 11. They work perfectly.

I have the mspaint.exe from the same version too :P. It complains about registry stuff on launch but other than that it works fine. There's no spray can in the modern paint!

I like paint shop pro, I use 4.12.

Re: Windows Notepad App Remote Code Execution Vulnerability

#210
post #170

Earlier quoted context omitted.

Exactly my predicament. My laptop reached EOL but I'm struggling to purchase a new one. They're all bundled with AI features (I absolutely don't need) and never in my life will I buy a mac for coding. My current laptop is HODL'ing and idk if this enshittification will end soon.

As someone who would like to get a new PC (but a desktop) for coding, and is considering a mac, why would you never buy a mac for coding ? I'm currently running Ubuntu on this ancient thing (which I love actually), but I absolutely don't want Windows.

1. I like my laptops with USB ports and removable RAM and disk. I love computers and opening up a mac is a bad experience.

2. It costs an arm and a leg to replace parts on a Mac when you travel outside the United States. Replacing the keyboard on my first macbook cost the same as the actual price. I learnt my lesson. I don't need that Apple garbage in my life.

Post reply on HN