73
Windows Notepad App Remote Code Execution Vulnerability (msrc.microsoft.com)
submitted 8 months ago by to c/technology@hexbear.net
22 comments fedilink hide all child comments
 

do not click on markdownin notepad. It's ok to click on markdown here in your brower because I'm just letting you know not to click on markdown illegal-to-say

you are viewing a single comment's thread
view the rest of the comments
[–] 15 points 8 months ago (9 children)

wtf version of notepad even lets you create clickable hyperlinks in the first place?

  • permalink
  • fedilink
  • source
  • hideshow 9 child comments
    •
  • [–] 10 points 8 months ago (8 children)

    My main uses for notepad:

    Second clipboard I can paste stuff into without worrying about consequences.

    Paste formatted text into notepad and copy it immediately to strip away formatting.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [+] 3 points 8 months ago (5 children)
    [deleted]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 6 points 8 months ago (4 children)

    Depending on the browser settings, the content of the URL bar get sent to Google even without hitting enter.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [+] 6 points 8 months ago* (3 children)
    [deleted]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 4 points 8 months ago* (2 children)

    It's just a bad practice and it doesn't really matter which search engine.

    It also wouldn't surprise me if browsers send it to the DNS server which is an unencrypted request. But I don't know that.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •