Remix clone Hacker News

new | show | ask | jobs Github

	▲	throwaway2037 15 hours ago
		`> Microsoft managed to add arbitrary code execution to Notepad.` You write as though this was an intentional feature. Not, it was a CVE. I had to Google about it. For anyone else who didn't know about this CVE: "Microsoft added Markdown (.md) support and interactive hyperlink parsing to the modern Windows 11 version of Notepad. Improper validation of links meant that clicking a crafted hyperlink inside a Markdown file could cause Notepad to launch unverified protocol handlers without proper warnings." This CVE has already been patched. `> And it all points to a total disregard of the end-user` I don't understand this part. Are you trying to say that because they had a security flaw in a new feature that this demonstrates "total disregard of the end-user"? It seems like quite a reach.
	▲	itopaloglu83 8 hours ago \| parent [-]
		Arbitrary code execution in Notepad. That’s just insane, regardless of how they added as a “feature”.