Pierre-Yves Lapersonne@programming.devM to Opensource@programming.dev · 16 days agoNotepad++ hijacked by state-sponsored hackersnotepad-plus-plus.orgexternal-linkmessage-square6linkfedilinkarrow-up123arrow-down10 cross-posted to: foss@beehaw.orgopensource@lemmy.mlcybersecurity@infosec.pubtechnology@lemmy.mltechnik@feddit.orgtechnology@lemmy.worldnotepadplusplus@programming.devopensource@programming.devedv_sicherheit@feddit.org
arrow-up123arrow-down1external-linkNotepad++ hijacked by state-sponsored hackersnotepad-plus-plus.orgPierre-Yves Lapersonne@programming.devM to Opensource@programming.dev · 16 days agomessage-square6linkfedilink cross-posted to: foss@beehaw.orgopensource@lemmy.mlcybersecurity@infosec.pubtechnology@lemmy.mltechnik@feddit.orgtechnology@lemmy.worldnotepadplusplus@programming.devopensource@programming.devedv_sicherheit@feddit.org
minus-squareDem Bosain@midwest.sociallinkfedilinkEnglisharrow-up1·16 days agoIt wasn’t specifically notepad++ code, but a custom-written updater. That’s why it was connecting to the internet.
minus-squarevillage604@adultswim.fanlinkfedilinkEnglisharrow-up2·16 days agoI mean, it is n++ code because the updater is part of the code base. They just didn’t have the connection to the update server hardened. This was patched in like December, though.
It wasn’t specifically notepad++ code, but a custom-written updater. That’s why it was connecting to the internet.
I mean, it is n++ code because the updater is part of the code base. They just didn’t have the connection to the update server hardened.
This was patched in like December, though.