Notepad++ supply chain attack breakdown

Re:Notepad++ supply chain attack breakdown by BobbyTables2 on Tuesday February 03, 2026 @10:55PM (#46881267)

I intensely hate that a stupid application can modify .bashrc and permanently persist itself.

Sure, in theory, SELinux could prevent this. But seems like an uphill battle if my policies conflict with the distro’s. I’d also have to “absorb” their policies’ mental model first…

[ Parent | on HN ]

Re:Notepad++ supply chain attack breakdown by themafia on Wednesday February 04, 2026 @01:07AM (#46882056)

I tend to think things like .bashrc or .zshrc are bad ideas anyways. Not that you asked but I think the simpler solution is to have those files be owned by root and not writable by the user. You're probably not modifying them that often anyways.

[ Parent | on HN ]