zlacker

[parent] [thread] 4 comments
1. Someon+(OP)[view] [source] 2026-02-03 23:40:47
I'm out of the loop: How did they bypass Notepad++'s digital signatures? I just downloaded it to double-check, and the installer is signed with a valid code-signing certificate.
replies(2): >>Aviceb+j >>gruez+e2
2. Aviceb+j[view] [source] 2026-02-03 23:42:20
>>Someon+(OP)
https://notepad-plus-plus.org/news/8.8.2-available-in-1-week...
replies(2): >>anonym+bg >>DANmod+sP5
3. gruez+e2[view] [source] 2026-02-03 23:53:06
>>Someon+(OP)
The updater doesn't check the certificate of the updated installer, it just executes whatever.
◧◩
4. anonym+bg[view] [source] [discussion] 2026-02-04 01:19:39
>>Aviceb+j
Jeez, they didn't waste any time, did they? No more signing certificate in June, compromise in July
◧◩
5. DANmod+sP5[view] [source] [discussion] 2026-02-05 16:37:05
>>Aviceb+j
> we’re hopeful we can find a solution ASAP!

Never meet your heroes.

[go to top]