News for hackers. Stuff that matters.

A comment on Notepad++ supply chain attack breakdown. Parent comment

Re:Notepad++ supply chain attack breakdown by FergusArgyll on Tuesday February 03, 2026 @07:02PM (#46879324)
Doesn't it use bwrap under the hood? what's wrong with that?
[ Parent | on HN ]
Re:Notepad++ supply chain attack breakdown by okanat on Tuesday February 03, 2026 @07:46PM (#46879760)
Many apps require unnecessarily broad permissions with Flatpak. Unlike Android and iOS apps they weren't designed for environments with limited permissions.
[ Parent | on HN ]
Re:Notepad++ supply chain attack breakdown by IsTom on Wednesday February 04, 2026 @07:00AM (#46884814)
> Unlike Android

My experience with android apps seems to be different. Every other app seems to be asking for contacts or calling or access to files.

[ Parent | on HN ]
Re:Notepad++ supply chain attack breakdown by HPsquared on Wednesday February 04, 2026 @07:42AM (#46885155)
You can usually deny those. If they ask for them without a good reason, that's already suspicious.
[ Parent | on HN ]