all 54 comments

sorted by: hot top controversial new old
[–] 89 points 9 months ago* (23 children)

What about nano? Is it OK to choose a safe middle ground? I mean with ed I could just as well use butterflies.

BTW, notepad++ is popular on Windows. That's the sort of software what gets hijacked.

  • source
  • hideshow 23 child comments
  • [–] 51 points 9 months ago (16 children)

    Vim and Emacs are popular in ultra critical environments, and as far as we know they aren't compromised by any intelligence agency.

  • source
  • parent
  • hideshow 16 child comments
  • [–] 42 points 9 months ago (15 children)
  • [–] 27 points 9 months ago (11 children)

    nano likes you too. But real h4x0rs use vim. Or emacs if they have 40 fingers.

  • source
  • parent
  • hideshow 11 child comments
  • [–] 63 points 9 months ago (3 children)

    nano good for idiot. me stupid. me nano for edit config file. nano not scary to leave, nano tell you exactly how!

  • source
  • parent
  • hideshow 3 child comments
  • [–] 9 points 9 months ago (3 children)

    im pretty sure you can operate emacs with only one finger with some insane configuration tho

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 9 months ago (1 child)

    You operate better in Emacs if you touch type, but you should learn to touch type if you work in an editor a lot

    You rarely need to hold more than crtl, shift and a character, and you have ctrl and shift both sides of the keyboard so it's easy

    Meta is toggled in the default configuration tap it then do whatever key combinations.

    Ctrl+g cancels partly complete commands

  • source
  • parent
  • hideshow 1 child comment
  • [–] 41 points 9 months ago (2 children)

    I love nano, if only because nano means child in my language, and as slang it's more or less equivalent to "bro"

    Bro, please I need to edit my docker compose.

    I know it's only funny for me. That's enough

  • source
  • parent
  • hideshow 2 child comments
  • [–] [S] 18 points 9 months ago (2 children)

    depends,
    do you want to edit the textfile, or nanodit it?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 40 points 9 months ago

    Everybody gangsta til XZ Utils gets an update

  • source
  • [–] 25 points 9 months ago

    Would anybody be around to notice if it was?

  • source
  • [–] 33 points 9 months ago (1 child)

    altr the only book i own on text editing

  • source
  • hideshow 1 child comment
  • [–] 12 points 9 months ago (4 children)

    eMacs wasn’t compromised!

  • source
  • hideshow 4 child comments
  • [–] 7 points 9 months ago* (3 children)

    I f'ing love emacs, but don't get cocky. It's a security disaster.

    Well, if you use any packages fetched from the net anyway.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 9 months ago

    I was being like 99% facetious and the 1% serious has more to do with how eMacs updates are distributed as compared to Notepad++. To your point, any non-vetted packages would be a huge source of risk, and even vetted packages should be monitored.

  • source
  • parent
  • [–] 20 points 9 months ago (5 children)

    vim is all i need and is all i’ll ever need.

  • source
  • hideshow 5 child comments
  • [–] 15 points 9 months ago (2 children)

    Emacs* is bloatware

    Vims just bloat on ed

    ed is the only answer.

    Our true salvation

    *being an acronym for "Eight Megabytes And Currently Swapping"

  • source
  • parent
  • hideshow 2 child comments
  • [–] 32 points 9 months ago (4 children)

    Upstream infrastructure was compromised. Implying it’s a fault with Notepad++ fault is disingenuous. What OSS maintainer is going to think, “I need to pick a hosting provider that’s not going to get hacked by the Chinese government”? Unless your favorite editor is being hosted on infrastructure hardened against state level hackers, it’s not any better.

  • source
  • hideshow 4 child comments
  • [–] 19 points 9 months ago (3 children)

    Did you not read the part about n++ not changing/rotating credentials? I think there's enough blame to go around.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 13 points 9 months ago

    They also weren’t doing any kind of SSL verification for the download request, nor were they doing any kind of hash verification or signing. The former would have prevented a redirect attack in the first place, and the latter would have prevented downloaded files from being modified or swapped out.

  • source
  • parent
  • [–] 9 points 9 months ago

    me reading this title and being transported to LiveJournal in 2005

  • source
  • [–] 6 points 9 months ago (2 children)
  • [–] 6 points 9 months ago (1 child)

    editors are bloat, manually flip the bits you want with your HANDS like a REAL programmer

  • source
  • hideshow 1 child comment
  • [–] 3 points 9 months ago* (last edited 9 months ago)

    Correct me if I'm wrong, but initial news about it serving malicious updates were false. You never got anything malicious thru updates, neither was the exe file/installer tampered with. The worst they actually did was redirect you to a fake site when pressing download, where the malicious file was distributed. GitHub and signed versions were never affected. What's also interesting is that the attacker selectively redirected people, not all of them. I always installed n++ using Ninite, so I'm in the clear.

    The whole thing seems blown out of proportions. The amount of affected people is likely very small.

  • source
  • [–] 2 points 9 months ago (2 children)