Live data from Hacker News

Notepad++ hijacked by state-sponsored actors

notepad-plus-plus.org

281–290 of 560 posts

Re: Notepad++ hijacked by state-sponsored actors

#281

Earlier quoted context omitted.

That you seem to believe politics exists to solve people's problems is probably the reason you feel it is so important. I'm sorry that you are so profoundly confused.

Oh, you're one of those bootstrappy libertarians, I'm taking it. Everything you've ever done is by your own two merits, right? Nevermind the fact that you take society's roads and use society's technology, which are the results of politics. You drink society's water and eat society's food, which are the results of politics. You enjoy the security of not being invaded by enemy tribes nor your neighbors, which are the…

I live in a society that feeds me and rewards me for work and does a whole host of other things for me. I am grateful for all of it. Many other people are not so well served by society. This is all true. None of that has anything to do with politics.

Politics is a game. It is played with one single objective: to make sure that the people with no political power remain fighting among themselves instead of fighting those with power. If you believe some favored political faction will solve these problems you mention, then it is you who is missing the entire point.

Re: Notepad++ hijacked by state-sponsored actors

#283

Earlier quoted context omitted.

It intrinsically does. Whatever stance changes nothing or prefers to change nothing is a vote for the status quo, by definition.

No, that isn't remotely true. It means that the alternative you offer isn't compelling, not that your interlocutor likes the status quo.

We're talking about the effect of non-action. To not act against a status quo is to enable it. Your feelings don't matter in that equation.

Re: Notepad++ hijacked by state-sponsored actors

#284
post #258

I've been thinking a lot lately about open source. It seems to be a lot like the communism - sounds great on paper but we are yet to see a proper implementation. Between GIT, Linux and SQLite there are a few projects that has been led by weirdos that have time, resources and conviction to drive these through time. Unless you create some sort of a an auxiliary business and get an acquihire deal most things will fizzle…

> Unless you create some sort of a an auxiliary business and get an acquihire deal most things will fizzle out.

This is acceptable. Why shouldn't most things started by people not willing to put in the work to keep them going not fizzle out? The important thing is that anyone who actually cares to can jump in and pick up right where the open source software fizzled out and get it going again. Anyone can learn from the code and use it for anything they want, even things that have nothing to do with the goals of the original project.

It's not as if there aren't countless examples of corporate vendors dying off and leaving their customers on the hook with nothing, or just changing the product drastically after the sale. At least in the open source case you have the option to fork the project and continue using it as you always have.

Re: Notepad++ hijacked by state-sponsored actors

#285

Earlier quoted context omitted.

I can't help but feel there must some better venue for such messaging. When I see politics in software updates or documentation, nothing happens because I'm not looking to use the software for political activism. Maybe I tell my adblocker to remove the messaging, and carry on with my task. I can engage with politics in a social context, when political messaging isn't interrupting something else I'm doing; that's a be…

Similar comments also come up in the [now regular] "I don't want to see political articles on HN" threads, and I think the response is similar: Asking for "no politics" is itself a strong political view: One in support/service of whatever the current status quo is. Trying to set oneself apart from (or above) politics is itself political. If you're lucky enough to be one of the fortunate people on earth who are not un…

[deleted]

Re: Notepad++ hijacked by state-sponsored actors

#286

Earlier quoted context omitted.

Yeah, Notepad++ is known for political messaging in their updates. Taiwan, Ukraine, etc.

I can't help but feel there must some better venue for such messaging. When I see politics in software updates or documentation, nothing happens because I'm not looking to use the software for political activism. Maybe I tell my adblocker to remove the messaging, and carry on with my task. I can engage with politics in a social context, when political messaging isn't interrupting something else I'm doing; that's a be…

The idea of using GPLed software and clutching pearls that it’s political boggles my mind.

Free Software is inherently political. It’s like ordering a cheeseburger and being shocked that it has meat in it.

Re: Notepad++ hijacked by state-sponsored actors

#287
post #168

Earlier quoted context omitted.

Probably the real motive.

“ The incident began from June 2025. Multiple independaent security researchers have assessed that the threat acotor is likely a Chinese state-sponsored group, which would explain the highly selective targeting obseved during the campaign.” How do they know it was a Chinese group or even a state sponsored one?

Perhaps it's "...because that would explain..."?

Re: Notepad++ hijacked by state-sponsored actors

#288

So, let me get this straight. If I've been lazy, postponed updates and I'm still on 8.5.8 (Oct 2023) - it turns out I'm actually...safer? Anyway, I hope the author can be a bit more specific about what actually has happened to those unlucky enough to have received these malicious updates. And perhaps a tool to e.g. do a checksum of all Notepad++ files, and compare them to the ones of a verified clean install of the u…

8.4.7 here. phew

Re: Notepad++ hijacked by state-sponsored actors

#289

Earlier quoted context omitted.

Oh, you're one of those bootstrappy libertarians, I'm taking it. Everything you've ever done is by your own two merits, right? Nevermind the fact that you take society's roads and use society's technology, which are the results of politics. You drink society's water and eat society's food, which are the results of politics. You enjoy the security of not being invaded by enemy tribes nor your neighbors, which are the…

I live in a society that feeds me and rewards me for work and does a whole host of other things for me. I am grateful for all of it. Many other people are not so well served by society. This is all true. None of that has anything to do with politics. Politics is a game. It is played with one single objective: to make sure that the people with no political power remain fighting among themselves instead of fighting tho…

I'm taking you're from the US from the "either team" comment. That is a really elementary understanding of politics. Politics, again, is a word describing how humans behave in groups. Where are roads built? That's a political decision made by groups of humans reaching consensus. What is the budget for the local security force? That's a political decision made by groups of humans reaching consensus. How much money is going to be collected from everyone locally to pay for those roads and security? That's a political decision made by groups of humans reaching consensus. If you're even allowed to participate in the consensus process... that itself is politics! For most of recorded history, decisions were made by the consensus of clergy, nobility and royalty, who coerced the rest of society into supporting their consensus through organized violence. Are you allowed to own property? That is the result of your group reaching consensus saying you're allowed to.

> How the produce of society is distributed and how people are cared for has zero relevance to an article about hacking a text editor,

The article is political. People make noise about Taiwan because an invasion of Taiwan would kill many and oppress more, in other words because it, like all political matters, is something that determines the course of lives of millions. Even if they are not directly affected, noise about politics escalates as a mechanism for people to protect themselves. When you are at the wrong end of a group that outnumbers you trying to kill you, you will require the aid of others. But will others come to your aid if you were not willing to come to their aid? This is how the concept of a "conscience" and "empathy" evolved -- because they give an evolutionary advantage, of providing for your own survival by ensuring collective survival.

Edit: for posterity, the comment I was replying to mentioned a "belief in either team leading you to the promised land", which has been edited out.

Re: Notepad++ hijacked by state-sponsored actors

#290

Earlier quoted context omitted.

Yup, the only way to combat this as a smalltime dev would be to turn off auto updates and make people build from source.

yea `curl | gcc` is much safer...

Security through ..rarity? Maybe not for nation state actors though.
Post reply on HN