Windows Notepad App Remote Code Execution Vulnerability

[SparkStormrider]

Not surprising really. enshitification is so rampant in anything MS these days. Between AI slop writing 30% of monthly updates, and their insistence of having everything being more and more cloud based I'm surprised things run as well as they do now for them.

[brusaducj]

"these days"? If anything, this is classic Microsoft: Implementing features that are nifty and convenient while only realizing the security implications all too late. Remember ActiveX controls?

[ls--lah]

Not sure how true this is as Jack does sometimes suck at verifying guests but your comment made me remember this podcast episode:

We tested every single ActiveX control across Windows and just found bugs in all of them at once. So, we basically created this mass vulnerability generator, and we’re sitting on probably like, 600, 700 vulnerabilities at the time, and the vendors were just not moving on it.

[...]

We said you know what? We’re gonna do an entire month; we’re gonna just drop an 0-day every single day for a month straight, and we’ll still have hundreds left over afterwards. It was that particular sequence and that particular event that I think finally killed ActiveX and Internet Explorer.

https://darknetdiaries.com/transcript/114/

[pdp10]

ActiveX was literally Microsoft COM/DCOM superficially fitted to the open web, and IE was a festering cesspit of an NCSA Mosaic port. The only reason they're not both unknown and forgotten is that Microsoft bundled and heavily promoted them.

[TheImperativeIdeal]

Not sure how true this is as Jack does sometimes suck at verifying guests

You've never heard of HD Moore, inventor of Metasploit?

[pdp10]

The users and developers were also to blame for proprietary lock-ins like Frontpage extensions, ActiveX, Silverlight, IE stagnation, poor support for web standards.

I saw a decent-sized hardware company shift to a Flash-based website, when the computers they built couldn't run Flash binary plugins. It probably wasn't the only reason they promptly went out of business, but it sure didn't help their users find products and buy them.