Notepad Exploit Explained

It's not even April, 1st and it already pass the world's quota

I don't want Notepad to even parse fonts at this point. Time to write my own plain text editor. Bitmap fonts, distance field outlines, dark mode, tabs. Parse nothing.

is this real??? this was a joke, right??? oh my god!

Full Ep:

Maybe they used Claude Code to build the feature. Imagine if someone placed this command in markdown? rm - r -f

They did remove dynamic desktop background (which is very useful property by the way for that time) from XP because of this kind of risks and now they put it in Notepad, nice...

Jesus Fuck! Is everyone at Microslop a moron now..??

Just use Notepad++

@ThePrimeagen holy shit that is so bad 😭

hey @grok even my grandma knows that one should not run scripts from random websites in a system shell, yet this behavior is present in the Windows 11 Notepad under markdown. How would you rate the competence level of the team working on Windows 11?

Who had a yearly goal to improve a window app and choose notepad. I use notepad when I don’t want any extra features. Just show me text. That’s all. I don’t want you to make links easier to use. I use notepad to read the text in the link.

@grok explain this exploit and if it would work on web app as an exploit

*taps sign*

Such a facepalm moment

Bananas.

Reminds me of this patch for st (system() injection):

Oh noes

@ThePrimeagen What the fuck??? No one saw any problems with that? It's covered by any decent cybersec 101 course that you NEVER mix exec and user input, and when you can easily obfuscate the link... Jesus

what the actual fuck

based

I'm basically retarded, and so game recognizes game

To those who don't know a shell commands gives instruction DIRECTLY to your operating system (i.e. windows)

.@cmuratori I had the same face. Thanks, I hate it.

Im not even a Windows dev and I giggled 🤣

Whaaaaat?

Hive analyzed this post using Hive's AI / Deepfake detection models. "@hive_ai is this AI generated" to check any content! AI Generated Video: 7% AI Generated Speech: 0% AI Generated Music: 0% Deepfake: 0%

... win xp good, vista bad, win7 good, win8 bad, win10 good, win11 bad ...

Hdv L v 1 i c115c ^4::#,44v ÷1××

Lol I was working on outlook years ago and it’s just Microsoft word with an email client. 🤣

I was laughing out loud with them before they started. Holy crap. Seriously?

@ThePrimeagen Omg Lmfao 😂

Fun fact XIVLauncher was doing the same thing (not sure if behaviour was changed), the custom open source launcher. Their entire code base is a mess filled with exploits, this is for the people who argue open source fixes all this problems.

@natervader13 Holy fuck

@shanselman no way!