So they say at the provider level update traffic was redirected . Does this also mean their update endpoints didn’t do encryption?
Notepad++ hijacked by state-sponsored actors
21–30 of 560 posts
Re: Notepad++ hijacked by state-sponsored actors
#22i always worry about tools like this, maintained by small teams, that are so universal that even if only a small fraction of installs are somehow co-opted by malicious actors, you have a wide open attack surface on most tech companies. e.g. iTerm, Cyberduck, editors of all shades, various VSCode extensions, etc.
If you think large companies are somehow immune to this, you’re gonna have a bad time.
It's not a matter of "immune" - larger organizations generally have more resources to allocate to things like this. That doesn't mean they get it right 100% of the time, but they are at least able to try, while small teams or volunteer projects often simply don't have the hours to spend on things like this.
Re: Notepad++ hijacked by state-sponsored actors
#23So they say at the provider level update traffic was redirected . Does this also mean their update endpoints didn’t do encryption?
Yea, should have finished reading. Remediation was to “ verify both the certificate and the signature of the downloaded installer. “
I mean for such a dev focused and extremely performant app, that’s disappointing.
Glad I’m off windows as of late
Re: Notepad++ hijacked by state-sponsored actors
#24Would've been good if it named the hosting provider. That's the most informative part.
Maybe the hosting provider is currently undergoing an audit or implementing the changes?
I expect to know it one day, but it may be too early to provide the name now.
Re: Notepad++ hijacked by state-sponsored actors
#25I'm extremely wary about any application pushing politics. I subscribe to MacPaw, who makes excellent apps like Setapp, Gemini, and CleanMyMac, all of which I use. At some point, CleanMyMac started putting the Ukranian flag on the app icon and flagging utilities by any Russian developer as untrustworthy (because they are russian), and recommended that I uninstall them. I am not pro russia/anti-ukraine independence by…
Sorry, what does this have to do with notepad++?
Re: Notepad++ hijacked by state-sponsored actors
#26This all fascinating, but in the end: I have notepad++; what should I do?
KDE's own kate is a good alternative, and available for install via chocolatey.
Re: Notepad++ hijacked by state-sponsored actors
#27I'm extremely wary about any application pushing politics. I subscribe to MacPaw, who makes excellent apps like Setapp, Gemini, and CleanMyMac, all of which I use. At some point, CleanMyMac started putting the Ukranian flag on the app icon and flagging utilities by any Russian developer as untrustworthy (because they are russian), and recommended that I uninstall them. I am not pro russia/anti-ukraine independence by…
Sorry, what does this have to do with notepad++?
The notepad++ author has publicly come out in favor of Taiwanese independence.
Re: Notepad++ hijacked by state-sponsored actors
#28I'm extremely wary about any application pushing politics. I subscribe to MacPaw, who makes excellent apps like Setapp, Gemini, and CleanMyMac, all of which I use. At some point, CleanMyMac started putting the Ukranian flag on the app icon and flagging utilities by any Russian developer as untrustworthy (because they are russian), and recommended that I uninstall them. I am not pro russia/anti-ukraine independence by…
Sorry, what does this have to do with notepad++?
Sorry, I meant to reply to this comment: https://news.ycombinator.com/item?id=46851664
Please refer to it for context.
Re: Notepad++ hijacked by state-sponsored actors
#29I'm extremely wary about any application pushing politics. I subscribe to MacPaw, who makes excellent apps like Setapp, Gemini, and CleanMyMac, all of which I use. At some point, CleanMyMac started putting the Ukranian flag on the app icon and flagging utilities by any Russian developer as untrustworthy (because they are russian), and recommended that I uninstall them. I am not pro russia/anti-ukraine independence by…
if you're going to give in and avoid applications because, like in this case they take a strong stance on Ukraine or Taiwan the hack has literally achieved its purpose. Either silence the author directly or destroy its userbase.
Fuck'em and just donate ten bucks to notepad++ , I'd rather my pc breaks then reward this crap
Re: Notepad++ hijacked by state-sponsored actors
#30I'm extremely wary about any application pushing politics. I subscribe to MacPaw, who makes excellent apps like Setapp, Gemini, and CleanMyMac, all of which I use. At some point, CleanMyMac started putting the Ukranian flag on the app icon and flagging utilities by any Russian developer as untrustworthy (because they are russian), and recommended that I uninstall them. I am not pro russia/anti-ukraine independence by…
Sorry, what does this have to do with notepad++?
[flagged]