3 ms·
This is a useless change. There was no issue in Notepad++. The attack involving scilexer.dll just happened to be a convenient way to inject code GIVEN you alrea
by shawnz 10y ago
This is a useless change. There was no issue in Notepad++. The attack involving scilexer.dll just happened to be a convenient way to inject code GIVEN you already have root access to write to the program directory. There are an endless number of other ways they could have done it in those circumstances.
- mistaken 10y agoExactly. They could replace notepad++.exe or install a rootkit or do it in a zillion other ways. I think this change was made so that already wiretapped people could detect this and to "calm" the public since the CIA is `OMG hacking into everybody's notepad, nobody is safe'.
- aleksei 10y agoIt says so right in the release notes..
- shawnz 10y agoThe release notes make some analogy about "locking your door" which is just ridiculous. This change doesn't even give the semblance of increased security. It is totally just an excuse for the author to make this politically charged changelog entry.