Earlier quoted context omitted.
[flagged]
Hum... We keep pretending the Solar Winds scandal never happened?
that wasnt really microsoft massive though.
Notepad++ hijacked by state-sponsored actors
261–270 of 560 posts
Re: Notepad++ hijacked by state-sponsored actors
#262Earlier quoted context omitted.
It wouldn't protect against this attack though. The Notepad++ update servers were hijacked. Presumably you would allow Notepad++ updates through Little Snitch so you would be equally as vulnerable.
No, why would you allow automatic updates? It makes no sense. You should audit every update as if each payload could contain malware. It’s a paranoid way to live, but that’s what it takes. We also need better computer science education in high schools, teaching students how to inspect network packets, verify SSL certificates, and evaluate whether a binary blob might contain malicious code. People have gotten complace…
You don't understand because you compare a mythical view of the past with the current reality
Re: Notepad++ hijacked by state-sponsored actors
#263Earlier quoted context omitted.
Everyone is entitled to their opinions. My opinion is that open source documentation is like polite dinner conversation: It’s not the proper place to discuss politics. If an author wishes to use their open source project as a platform to discuss politics, that’s the author’s prerogative. But then, as perhaps in this instance, it could be to the detriment of the project itself.
Other take is … which is cool feature of OSS … you don’t have to use projects that do political statements.
That’s true. My point was intended to be from the author perspective, rather than from the user perspective. Namely that an author using an open source project as a political platform can potentially put the project at risk. Rightly or wrongly, that’s the world we live in. So it’s a trade-off the author has to decide, one way or the other. I’d personally prioritise the project over the political. But the Notepad++ author is free to use their project how they like. It’s theirs, after all.
Re: Notepad++ hijacked by state-sponsored actors
#264What’s a good alternative?
Re: Notepad++ hijacked by state-sponsored actors
#265Earlier quoted context omitted.
Do you think it's socially acceptable to ignore everything that doesn't affect you personally? Many activists would certainly have you think otherwise. As far as I can tell, fighting that habit is a huge goal of activism.
A huge chunk of activism is pointless and annoying. Especially when every cause is lumped together into Activism (TM) and the Omnicause. I don’t agree with them and I don’t think they should be in my software, or dealing with anything they don’t understand (for instance crime, homeless people, geopolitics, or really anything outside of overpriced vegan coffee shops). All they really do is end up getting Fox News peop…
> A huge chunk of activism is pointless and annoying.
Activism can be annoying, but it's never pointless (not even when it fails to be effective).
> All they really do is end up getting Fox News people to vote for fascists like Trump out of spite
It wouldn't be worthwhile for activists to resign themselves to inaction out of fear of offending the "Fox news people". "Fox news people" are already more likely than not to vote for fascists like Trump, and they'll use any excuse/justification they're being fed including "I don't like the way the wrong people are using their freedom to protest the wrong things".
Re: Notepad++ hijacked by state-sponsored actors
#266So, let me get this straight. If I've been lazy, postponed updates and I'm still on 8.5.8 (Oct 2023) - it turns out I'm actually...safer? Anyway, I hope the author can be a bit more specific about what actually has happened to those unlucky enough to have received these malicious updates. And perhaps a tool to e.g. do a checksum of all Notepad++ files, and compare them to the ones of a verified clean install of the u…
If there’s anything I’ve learned from IBM, Red Hat, and CentOS, it’s that bleeding edge is actually what I’m supposed to want.
Re: Notepad++ hijacked by state-sponsored actors
#267Earlier quoted context omitted.
This reminds me of college, when some of my professors were still sorting out their curriculum and would give us homework assignments with bugs in it. I complained many times that they were enabling my innate procrastination by proving over and over again that starting the homework early meant you would get screwed. Every time I'd wait until the people in the forum started sounding optimistic before even looking at t…
Ah, I remember those days. One that wasn't an error exactly was an assignment that had a word limit of 2000 words or something. I'd written maybe 3000 words and spent quite some time cutting it down, getting it to just under the limit. Then someone else who also wrote too many words asked the professor if that was okay and they sent out an update to everyone saying it's fine to ignore the word limit.
So you accidentally learned how to edit a text? Sounds like a win to me…
Re: Notepad++ hijacked by state-sponsored actors
#268[flagged]
Re: Notepad++ hijacked by state-sponsored actors
#269Earlier quoted context omitted.
I can't help but feel there must some better venue for such messaging. When I see politics in software updates or documentation, nothing happens because I'm not looking to use the software for political activism. Maybe I tell my adblocker to remove the messaging, and carry on with my task. I can engage with politics in a social context, when political messaging isn't interrupting something else I'm doing; that's a be…
Similar comments also come up in the [now regular] "I don't want to see political articles on HN" threads, and I think the response is similar: Asking for "no politics" is itself a strong political view: One in support/service of whatever the current status quo is. Trying to set oneself apart from (or above) politics is itself political. If you're lucky enough to be one of the fortunate people on earth who are not un…
Not wanting politics on HN, need not imply support of the status quo, or even a lack of interest in politics. It can simply be a different belief about the purpose of online forums.
I read about politics all day long in many different places. My belief that HN should be relatively free of such stories is not because I believe I can detach myself from politics, but because I believe topic based forums are more valuable and useful than “anything goes” forums.