artyom comments on Notepad++ hijacked by state-sponsored hackers

[–] artyom@piefed.social 3 points 9 months ago (3 children)

I'm so confused.

It doesn't say anything about "state-sponsored attackers" outside of the headline? What state? Why?
Why is a Notepad app connecting to any servers or have credentials at all?

[–] DemBoSain@midwest.social 1 point 9 months ago (1 child)

It wasn't specifically notepad++ code, but a custom-written updater. That's why it was connecting to the internet.

parent

[–] village604@adultswim.fan 2 points 9 months ago

I mean, it is n++ code because the updater is part of the code base. They just didn't have the connection to the update server hardened.

This was patched in like December, though.

parent

load more comments (1 reply)