News for hackers. Stuff that matters.
Re:Notepad++ supply chain attack breakdown by cxr on Wednesday February 04, 2026 @03:03PM (#46890870)
It's truly perverse that, at the same time that desktop systems are trying to lock down what trusted, conventional native apps can and cannot do and/or access, you have the Chrome team pushing out proposals to expand what browsers allow websites to do to the user's file system, like silently/arbitrarily reading and writing to the user's disk—gated only behind a "Are you sure you want to allow this? Y/N"-style dialog that, for extremely good reasons, anyone with any sense about design and interaction has strongly opposed for the last 20+ years.

There are no comments on this comment yet.