4 ms·

"An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad, causing the application to launch unverified protocols

by rmunn 9mo ago

"An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad, causing the application to launch unverified protocols that load and execute remote files." I didn't even know Notepad would render Markdown.

ddtaylor 9mo ago
Torture will continue until morale improves
TZubiri 9mo ago
I think it's very recent, I use it almost daily and only last week did I see a markdown file being rendered.
- krater23 9mo ago
  These kind of surprises are the reason why we should switch off auto update on every software.
BLKNSLVR 9mo ago
Notepad rendering other formats removes one of the specific reasons I use notepad: to strip the stupid formatting that all sorts of applications seem to want to attach to text these days. Notepad handily strips away all the custom link namings and formats that totally fuck the expected output of a simple copy and paste. That's a big part of the its magic: it's immunity to the choices of marketing teams and dud management.
- contextfree 9mo ago
  Windows now has buttons in win-v (the clipboard helper popup) for this
- powersurge360 9mo ago
  I don’t know if it works for windows but on other operating systems if you hold shift while pasting it strips the special formatting. I don’t have a windows machine readily available but I hope even if it doesn’t work there this will be useful to other people reading the comment. I agree though. Basically the only format I ever want to keep is _sometimes_ the link with text. And even then usually not the exact coloring/indicators.
- icegreentea2 9mo ago
  You can still do this in W11 notepad. Firstly, there's a global setting for having formatting/markdown being enabled at all, and secondly it only does the rendering for .md files. Finally, while formatting is enabled, and editting a markdown file, you have the option to toggle between formatted and "syntax" view (ie raw text).

by rmunn 9mo ago

ddtaylor 9mo ago

Torture will continue until morale improves

TZubiri 9mo ago

I think it's very recent, I use it almost daily and only last week did I see a markdown file being rendered.

krater23 9mo ago
These kind of surprises are the reason why we should switch off auto update on every software.

BLKNSLVR 9mo ago

Notepad rendering other formats removes one of the specific reasons I use notepad: to strip the stupid formatting that all sorts of applications seem to want to attach to text these days. Notepad handily strips away all the custom link namings and formats that totally fuck the expected output of a simple copy and paste. That's a big part of the its magic: it's immunity to the choices of marketing teams and dud management.

contextfree 9mo ago
Windows now has buttons in win-v (the clipboard helper popup) for this
powersurge360 9mo ago
I don’t know if it works for windows but on other operating systems if you hold shift while pasting it strips the special formatting. I don’t have a windows machine readily available but I hope even if it doesn’t work there this will be useful to other people reading the comment. I agree though. Basically the only format I ever want to keep is _sometimes_ the link with text. And even then usually not the exact coloring/indicators.
icegreentea2 9mo ago
You can still do this in W11 notepad. Firstly, there's a global setting for having formatting/markdown being enabled at all, and secondly it only does the rendering for .md files. Finally, while formatting is enabled, and editting a markdown file, you have the option to toggle between formatted and "syntax" view (ie raw text).