5 ms·
That "fix" is kinda useless. But at least he admits it in the release notes.
by svenfaw 10y ago
That "fix" is kinda useless. But at least he admits it in the release notes.
- tgragnato 10y agoThinking that the author of a text editor should be concerned about the espionage activities of a superpower "is not how things should be". Useless, yes. Nobody thinks he should solve the problems of the world, that's just a message.
- infogulch 10y agoI suppose this could help anyone that is currently being targeted. Once they update it should be obvious that the dll is compromised. Maybe some will come out of the woodwork and show it.
- rossy 10y agoYep. > This solution only prevents from Notepad++ loading a CIA homemade DLL. It doesn't prevent your original notepad++.exe from being replaced by modified notepad++.exe while the CIA is controlling your PC. The CIA attack is an application directory attack, and the application directory is a trusted location on Windows. See: https://blogs.msdn.microsoft.com/oldnewthing/20161013-00/?p=94505 https://blogs.msdn.microsoft.com/oldnewthing/20161013-00/?p=... I guess the attack allowed them to inject code into a Notepad++ process without breaking the signature on notepad++.exe itself. There's probably some value to the CIA doing this, or they wouldn't have done it (...right?)
- kevincox 10y agoWell theoretically if you had a secure, verified boot chain this would plug a hole in it. However in practice we don't have a full signed and verified stack.