20260211 https://news.ycombinator.com/item?id=46971516 Windows Notepad App Remote Code Execution Vulnerability (804 points, 516 comments)
20260210 https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...
> "An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad"
Other recent Notepad issues:
20260207 https://news.ycombinator.com/item?id=46927098 Microsoft account bugs locked me out of Notepad – Are thin clients ruining PCs? (187 points, 284 comments)
20260127 https://news.ycombinator.com/item?id=46780451 Windows 11 January Update Breaks Notepad (60 points, 25 comments)
Notepad is supposed to be a bare bones editor -- where you go when everything else fails. The VI of Windows. If they want a rich editor, they should bring back WordPad.
Can someone please explain why these two things are ever simultaneously true? You buy the stupid Copilot+ PC that has "AI" NPU hardware, right? So the AI features should be able to run locally. But if you have to sign in with a Microsoft account, then surely, it doesn't run locally, which begs the question, why does it require a Copilot+ PC at all?
Not even going to bother asking "does anybody want this to begin with" because at this point there is no real need to bother asking that.
My two favourite 'AI' tools in image editing have been ones that can replace tedious work.
One such example are segmentation models that can be used for smart cutouts, removing backgrounds etc.
Now we have both 'segmentation' and 'AI' in paint - but the segmentation uses the exact same shitty flood fill with tolerance that's probably existed in the first paint program at Xerox PARC, while the 'AI' feature is another by-the-numbers crappy stable diffusion model that's strictly worse than anything you could get with your first Google search.
(I found an odd one: for some reason I can't log into my PC with my MS account, which let me create the local account I actually wanted. System broken in my favor.)
Everything MS is doing in Windows is to this end.
Its is Micro$oft after all :P
The reason we're getting this AI gumbo is that obviously the product people at M$ we're told: "Make money by selling AI features!!!". Which flipped their minds from their usual "I am Steve Jobs" fantasies, which tell them to _consider the User experience first_, to _Consider the companie$ experience first_, and they can't keep the two concepts in their little heads at the same time because they are, after all, just product people.
The there was a brief moment where it became decent. Still a barebones text editor, but it could actually edit text, what I think most people expected Notepad to be.
And now, it is going the other way, with "AI" features no one wanted, and also "Markdown support" which is ironic since Markdown is designed to look good in a regular text editor. Now we have something that isn't really a text editor, but not really a wysiwyg editor either, it has some advanced features like AI, but is lacking features most other semi-advanced text editors have (ex: syntax highlighting).
At least, it was good for a couple of years.
Isn’t it boring when a piece of software is just complete? In fact that’s an unacceptable state for it!
step 2: omg there's demand for features
step 3: turn notepad, whose point was to be a dumb simple thing, into a wordpad
step 4: get a raise because you "solved" the problem
Step 6: GOTO 1.
I’m willing to bet that adding markdown to Notepad was a lot simpler than trying to make it work in Wordpad, especially since you’d probably still have to support rich text.
When they introduced a mobile first UI onto a desktop OS...
When they forced mandatory Microsoft accounts...
When they started saving files that had no place being in one drive to the cloud by default and charging people for it...
When they announced the worst AI privacy disaster in computing OS history...
When their updates refused to install cleanly and bricked people's computer to the point of hardware damage...
Seriously thinking I might have Stockholm syndrome at this point. To me the best windows would be Windows 11's kernel and libraries with Windows 7's UI and apps. Because it's been all down hill (generally) since there.
For me it's currently the minimal-hassle way to make my Steam library runnable. But it feels like we're moving in a good direction thanks to Valve's efforts where one day I may be able to never boot into Windows on my PC.
That's when I jumped to Macs and haven't looked back since. Windows is just a glorified game console to me now, but I have enough fun with PS5/Switch exclusives.
Though macOS is also becoming annoying, not quite to that breaking point yet, but worrying
Meanwhile Linuxland seems like a chaos of 10000 people who all think they're right, under an anal overlord
Maybe it's time to dig the Commodore 64 back up? :')
But who cares though, soon AI will make operating systems meaningless, right?
Does anyone now how to achieve that? What happens when you replace the kernel in a Windows 7 installation with the one from Windows 11? How is the manual update procedure for kernels on MS Windows?
EDIT: yes it does and it has actually been updated yesterday.
For a UI I’ve been using VSCode. It is quite quick when you disable all extensions and most settings.
0) Set "When Notepad starts" option to "Start new session and discard unsaved changes"
1) New file
2) Type "abc" - note the "X" to close the file changes to a "O" (pretend that's a circle) to indicate unsaved changes
3) Save file - "O" changes back to "X"
4) Type "def" - "X" changes back to "O" because "def" is not on the file on disk
5) Undo, "def" disappears, "O" incorrectly remains...
6) Redo, "def" reappears, "O" incorrectly changes back to "X"
7) Close file. No prompt to save unsaved "def". Reopen file. "def" is gone
> Unsupported Syntax Detected
> This file contains syntax that isn't fully supported in formatted view. Some content may not render as intended, and switching views could modify parts of your original Markdown. Do you want to continue?
Article: People systematically overlook subtractive changes - https://www.nature.com/articles/s41586-021-03380-y
(Modulo CR/LF, of course.)
Apps like classic notepad are useful to have around, when apps that try to parse things like markdown get it wrong and the underlying file needs to be fixed.
https://github.com/reactos/reactos/tree/master/base/applicat...
Maybe someone should submit a feature request for it.
What's next, in a few years we're rocking EDLIN when we need to operate on a text file safely?
edit.exe[1,2] actually. And it runs on Linux too! Linux had a real lack of good text editors.
^+v::
Clipboard:=Clipboard
Send ^v
Cmd-L Cmd-V Cmd-A Cmd-C
(swap for Cmd for Ctrl on non-Mac)
Meanwhile, 2 weeks ago:
Windows Notepad App Remote Code Execution Vulnerability
Markdown presents a chicken-&-egg scenario that has dragged on for decades: tons of Markdown documents, but almost nothing with which to simply view (not edit) them as intended. Mystifying.
I think this explains the lack of viewers; they are simply not needed.
I know there are others and there are fine points. I would like to see a couple minor additions to support image placement (that aligns with Medium's editor) and finally a strike-through text notation. But that's about it.
(Update: Ah, title is a little misleading. This update doesn't introduce Markdown, it adds support for nested Markdown lists etc.)
Personally, I think they should've kept Notepad as-is and reincarnated WordPad instead, rewriting it and giving it Markdown instead of RTF. It already had the basic formatting interface and all. It would've been a pretty smooth transition.
The problem is that Markdown supports quite a bit, even tables, which lends to feature creep. It was already more sluggish without any of this due to moving Notepad to WinUI.
Maybe I'd mind it less if they put the new MS Edit in Windows by default, so again, there's a minimal plain text editor in the box.
This doesn't seem like a good idea.
And WordPad was built on top of the "RICHEDIT" window class, and exposed lots of the OLE features provided by the rich text control. "Insert Object" is a powerful and potentially dangerous feature with a lineage going back to the Windows 3.1 days. As long as your DLL is registered correctly, any document in an OLE-capable program can cause objects from that DLL to become instantiated and deserialized.
Getting rid of documents able to instantiate arbitrary OLE controls is a good reason to try to remove WordPad. It's not just some simple styled text editor.
Do you need to log in to notepad now? What in the actual hell is going on?
This tool would have been so useful 25 years ago when I had to manually recolour every pixel in the contour of the cool photo I was editing for my new desktop background because the fill tool didn't recognise the background properly.
It's a drop-in replacement for Notepad that does add a few extra features, but does not have even the minimal suite of features that something like Notepad++ has. Where Notepad++ is great for code editing and extensible functionality via plugins, Notepad2 is more suited for people who just want Notepad, without the Windows/Microsoft. It has line numbers and (limited) syntax highlighting and a dark mode - bits and bobs like that - but it does not have tabs and ftp-on-save and the more complex stuff that requires a larger binary size.
It's free, it works like Notepad, and it acts like a bare bones text editor. In many, many cases, it's exactly what I want, and it's always exactly what I want in cases where my original intention would have been to use Windows' Notepad.
Oh boy.
But this is just following a pattern, the enshittified even calc.exe and mspaint. Previewing pictures in windows is shamefully slow because the previewer is also a bloat.
My diagnosis is that Microsoft doesn't have good technical leadership. It has spread the risk of bad decisions by individual leaders by spreading it amongst too many decision makers, and those people aren't always technically apt, or they have aptitude within their specific domain of expertise. Why is the start menu in react native for example.
they also have a crippling illness in the form of sunken-cost fallacy. Even when no one is especially depending on it, they go all-or-nothing on tech stacks and design patterns. Marketing and branding ultimately, I think is their biggest problem. You know how they name everything terribly? that's trying to capitalize on existing branding. This is fundamentally the mindset of salespeople. they could be spinning a new app, or making a vscode-lite ship with windows, but brand familiarity is why they're messing with notepad.
It is truly dumbfounding, they're being run like HP and IBM but because of how much the world relies on them, and because of Azure they're making so much profit.
Why are the shareholders no enraged even more? To have such a vast marketshare and failing to capitalize on it is terrible. They could be doing better than Apple. Even apple sees the writing on the wall and adapts their strategy fundamentally by starting to make their own silicon. It's like having a barn full of chicken that lay golden eggs, but the farmer is slaughtering them for their meat, and the farmer's employer doesn't care because chicken meat is still making good enough profits.
It's funny because they are actively destroying existing branding these days. Like how they renamed Office after their failed AI assistant, rather than the other way around.
Is there anything big and exciting out there still driven by taste and vision rather than metric bumps?
Microsoft has already positioned VS Code as its code editor and OneNote as its notetaking app. Why should Notepad compete with these offerings?
Before you know it every month this thing will appear over the top of what you actually want to do.
I never use Notepad anymore. I have been using Pulsar, which is okay, but not exactly what I want.
I want a text editor that can do markdown if I want, spell check, minimal tool bar with some formatting shortcuts, etc.
I'd love it if a "dumbed down Typora" had a love child with Notepad.
Surprisingly, some of the projects such as AkelPad are still alive.
Win32 made things easier, as well as things like Delphi and Scintilla later.
Just checked my archives, and my own naive but functioning attempt measures whole whopping 36520 bytes, though not without the help of an executable packer, which was a fashion then.
Mostly works fine under Wine, though it is about the legal US drinking age.
It looks like to me that it stores its settings at "%LOCALAPPDATA%\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\Settings\settings.dat", which is some binary format.
Why is registry being abandoned? If it is, why isn't ini or json or a plain text format used? Who are working at Microsoft now, abandoning both the windows ways to approach tasks, and also the other generic sane default approaches?
I'm looking for a plain and simple text editor with no programmers' features—no line numbers, syntax highlighting, etc.—no tabs or MDI whatsoever. No, I'm not looking for something with "you can turn these off", just a complete reimplementation of Win95 Notepad made via black-box testing.
I hope they give notepad a keyboard shortcut to transition to ascii only like textedit has on the Mac
They are convinced it needs to be a worse vscode when all I want is something to edit plain text files.
Adding RTF and a wysiwyg markdown editor is the last thing that I want from something like notepad. When I open notepad, I still want to see the characters that are present. Heck, I'd like to be able to see the difference between a space and a tab. I'd want to be able to see which type of line ending are being used (and switch to the correct one, \n) Hiding characters is antithetical to the reason I'd use notepad in the first place.
I want to be able to search text and see text. Not compose a document or talk to an LLM.
I tried to take advantage of it, but the implementation felt really clunky (formatting seemed to be via menus only), so I’ve stuck with .txt files.
> To use Coloring book, you will need to sign in with your Microsoft account.
you will need to sign in with your Microsoft account. My god they love to identify you.
Notepad should be last thing they should be fiddling with.
I am sad that we have to install 3rd parties for basics now.
( In case you forgot: https://www.youtube.com/shorts/Vw1rMkUFqyc )
edit: just checked the version that ships with Steam on Linux, yep, works great in a VM
- Notepad: Plain Text
- Wordpad: Rich Text
- Word: Documents
Seriously? Markdown is the preferred method for rich text these days, so why didn't they just turn WordPad into a WYSIWYG Markdown editor?
They also shove Copilot into it, but that's a whole different problem. Who is this current iteration of Notepad actually made for?
- There wasn't anything that comes with Windows that natively supports it (before now)
- All your favorite text editors don't support it natively, and plugins vary
- You can pay for a nice markdown editor but for some reason your more powerful usual text editor is still free?
- You can open VSCode, which is hilarious overkill if you just want to take some notes. Obsidian is excellent but same problem.
- Maybe something I'm missing?
Basically I think it is a great thing if I just get a lightweight markdown friendly editor built in, because I'll probably use it all the time.
...except if it immediately leads to a CVE, I guess.
The whole point of notepad was a plain text editor.
Wordpad was the lightweight document creation software.
Lately I've been doing the same for other small utilities. Roughly half the little tools I use are ones I generated and kept because they’re predictable and easy to audit.
The point isn't replacing built-ins; it's reducing dependence on shifting defaults. I want to care less about what the software/os vendor changes this time.
I recently used Windows Sandbox and was surprised that it does not have notepad. And why? Because it's a Store App now and that's unsupported inside the Windows Sandbox.
Notepad is supposed to be dumb, not Microsoft!
I can't even get visual studio code to stop showing that right-hand sidebar every time it opens up, regardless of what settings I use. It seems to work for a while, and then it appears again like magic.
I'm not sure how many more times they have to hit you straight in the face before you realize you're a victim here and need to get away from the abuser as much as you can, not try to "salvage" the situation.
recent vuln asside (big caveat ill admit) idk why you would use notepad at all when N++ exists
Somebody should probably tell Microsoft we’ve all moved on to better things like Notepad++ (even when their update supply chain gets compromised).