Notepad++ supply chain attack breakdown

Re:Notepad++ supply chain attack breakdown by what on Wednesday February 04, 2026 @12:32AM (#46881847)

Pretty sure that’s how it works on iOS. The app can only access its own sandboxed directory. If it wants anything else, it has to use a system provided file picker that provides a security scoped url for the selected file.

[ Parent | on HN ]

Re:Notepad++ supply chain attack breakdown by signal11 on Wednesday February 04, 2026 @03:42AM (#46883196)

Yes, UIDocumentPickerViewController is 10+ years old at this point.

There’s also a similar photos picker (PHPicker) which is especially good from 2023 on. Signal uses this for instance.

[ Parent | on HN ]

Re:Notepad++ supply chain attack breakdown by int_19h on Wednesday February 04, 2026 @04:31AM (#46883585)

It's also how it works on macOS and even on modern Windows if you are running sandboxed apps.

[ Parent | on HN ]