|
Author |
Message |
CaNsA |
This post is not being displayed .
|
CaNsA Super Spammer
Joined: 02 Jan 2008 Karma :
|
Posted: 23:18 - 12 Mar 2017 Post subject: Notepad++ - Update ASAP. |
|
|
https://notepad-plus-plus.org/news/notepad-7.3.3-fix-cia-hacking-issue.html
Quote: | 08 Mar 2017 21:58:00
"Vault 7: CIA Hacking Tools Revealed" has been published by Wikileaks recentely, and Notepad++ is on the list.
The issue of a hijacked DLL concerns scilexer.dll (needed by Notepad++) on a compromised PC, which is replaced by a modified scilexer.dll built by the CIA. When Notepad++ is launched, the modified scilexer.dll is loaded instead of the original one.
It doesn't mean that CIA is interested in your coding skill or in your sex message content typed in Notepad++, but rather it prevents raising any red flags while the DLL does data collection in the background.
It's not a vulnerability/security issue in Notepad++, but for remedying this issue, from this release (v7.3.3) forward, notepad++.exe checks the certificate validation in scilexer.dll before loading it. If the certificate is missing or invalid, then it just won't be loaded, and Notepad++ will fail to launch.
Checking the certificate of DLL makes it harder to hack. Note that once users’ PCs are compromised, the hackers can do anything on the PCs. This solution only prevents from Notepad++ loading a CIA homemade DLL. It doesn't prevent your original notepad++.exe from being replaced by modified notepad++.exe while the CIA is controlling your PC.
Just like knowing the lock is useless for people who are willing to go into my house, I still shut the door and lock it every morning when I leave home. We are in a f**king corrupted world, unfortunately.
Otherwise there are a lot of enhancements and bug-fixes which improve your Notepad++ experience. For all the detail change log, please check in the Download page. |
|
|
Back to top |
|
You must be logged in to rate posts |
|
|
Rogerborg |
This post is not being displayed .
|
Rogerborg nimbA
Joined: 26 Oct 2010 Karma :
|
Posted: 08:57 - 13 Mar 2017 Post subject: |
|
|
Cheers, chap.
Note that the auto-updater isn't picking up 7.3.3 yet (101h4x) so you'll want to go and download and install 7.3.3 manually.
Unless that's a r00tk1t. ____________________ Biking is 1/20th as dangerous as horse riding.
GONE: HN125-8, LF-250B, GPz 305, GPZ 500S, Burgman 400 // RIDING: F650GS (800 twin), Royal Enfield Bullet Electra 500 AVL, Ninja 250R because racebike |
|
Back to top |
|
You must be logged in to rate posts |
|
|
colink98 |
This post is not being displayed .
|
colink98 Could Be A Chat Bot
Joined: 27 Jun 2016 Karma :
|
|
Back to top |
|
You must be logged in to rate posts |
|
|
kgm |
This post is not being displayed .
|
kgm World Chat Champion
Joined: 04 Jun 2015 Karma :
|
Posted: 13:28 - 13 Mar 2017 Post subject: |
|
|
Good to know ta |
|
Back to top |
|
You must be logged in to rate posts |
|
|
Tigerlea |
This post is not being displayed .
|
Tigerlea Nitrous Nuisance
Joined: 07 Jul 2016 Karma :
|
|
Back to top |
|
You must be logged in to rate posts |
|
|
Rogerborg |
This post is not being displayed .
|
Rogerborg nimbA
Joined: 26 Oct 2010 Karma :
|
Posted: 12:01 - 14 Mar 2017 Post subject: |
|
|
All your code base are belong to them. ____________________ Biking is 1/20th as dangerous as horse riding.
GONE: HN125-8, LF-250B, GPz 305, GPZ 500S, Burgman 400 // RIDING: F650GS (800 twin), Royal Enfield Bullet Electra 500 AVL, Ninja 250R because racebike |
|
Back to top |
|
You must be logged in to rate posts |
|
|
noobRider |
This post is not being displayed .
|
noobRider World Chat Champion
Joined: 23 Sep 2012 Karma :
|
|
Back to top |
|
You must be logged in to rate posts |
|
|
The Shaggy D.A. |
This post is not being displayed .
|
The Shaggy D.A. Super Spammer
Joined: 12 Sep 2008 Karma :
|
Posted: 17:00 - 14 Mar 2017 Post subject: |
|
|
A number of us use this at work, thanks for the heads up. ____________________ Chances are quite high you are not in my Monkeysphere, and I don't care about you. Don't take it personally.
Currently : Royal Enfield 350 Meteor
Previously : CB100N > CB250RS > XJ900F > GT550 > GPZ750R/1000RX > AJS M16 > R100RT > Bullet 500 > CB500 > LS650P > Bullet Electra X & YBR125 > Bullet 350 "Superstar" & YBR125 Custom > Royal Enfield Classic 500 Despatch Limited Edition (28 of 200) & CB Two-Fifty Nighthawk > ER5 |
|
Back to top |
|
You must be logged in to rate posts |
|
|
Rogerborg |
This post is not being displayed .
|
Rogerborg nimbA
Joined: 26 Oct 2010 Karma :
|
|
Back to top |
|
You must be logged in to rate posts |
|
|
Jayy |
This post is not being displayed .
|
Jayy Mr. Ponzi
Joined: 08 Jun 2009 Karma :
|
|
Back to top |
|
You must be logged in to rate posts |
|
|
G |
This post is not being displayed .
|
G The Voice of Reason
Joined: 02 Feb 2002 Karma :
|
|
Back to top |
|
You must be logged in to rate posts |
|
|
CaNsA |
This post is not being displayed .
|
CaNsA Super Spammer
Joined: 02 Jan 2008 Karma :
|
|
Back to top |
|
You must be logged in to rate posts |
|
|
Baggyman |
This post is not being displayed .
|
Baggyman Crazy Courier
Joined: 20 Feb 2017 Karma :
|
|
Back to top |
|
You must be logged in to rate posts |
|
|
Val |
This post is not being displayed .
|
Val World Chat Champion
Joined: 03 Nov 2012 Karma :
|
|
Back to top |
|
You must be logged in to rate posts |
|
|
Old Thread Alert!
The last post was made 7 years, 36 days ago. Instead of replying here, would creating a new thread be more useful? |
|
|
|