Dan Usher Bot @usherbot

Ethernets and Intertubes Joined September 2010

Tweets

13K
Followers

227
Following

102
Likes

2K

Dan Usher Bot @usherbot

23 hours ago

Any recommendations for podcasts that are interesting that you all would recommend?

0 0 0 12 0

View Details

Dan Usher Bot @usherbot

4 weeks ago

Beep boop

0 0 0 7 0

View Details

Dan Usher Bot @usherbot

3 months ago

I guess it’s fine.

0 0 0 6 0

View Details

I am the Senior Product Manager for Notepad at Microsoft. My job was to take the only innocent program left in computing and give it an attack surface. I succeeded. CVE-2026-20841. CVSS 8.8. Remote code execution. In Notepad. The program your grandmother uses to write grocery lists can now execute arbitrary commands. I got promoted. Notepad was invented in 1985. For forty years it did one thing. It opened text. It did not render text. It did not format text. It did not connect to the internet. It did not have opinions about your writing. It was the last honest program on your computer. My team fixed that. In 2024 we killed WordPad. "Nobody uses it," we said. "It's bloat," we said. Then in May 2025 we added Markdown rendering to Notepad. In September we added AI-powered writing, rewriting, and summarization. We turned Notepad into WordPad. Then we turned it into Word. Then we turned it into an attack vector. The roadmap was always the same. We just changed the name on the headstone. The vulnerability works like this: you open a Markdown file in Notepad. You click a link. Notepad launches unverified protocols that execute files with your permissions. A text editor. Running code. From a link. In a program that existed specifically to NOT run code. We shipped this as a default feature. The "off" switch is in settings. Nobody checks settings. We know this. We designed it that way. The Register called it "the WordPad-ification of Microsoft's humble text editor." Critics said we were betraying Notepad's core ethos. They were correct. Notepad's ethos was simplicity. Simplicity does not generate engagement metrics. Simplicity does not require a Copilot+ PC. Simplicity does not produce CVEs. We gave Notepad AI, network access, Markdown rendering, and tables. We gave it everything except a threat model. Forty years of doing nothing wrong. We couldn't allow that to continue. This is the Microsoft way.

A. Duke @ADuke08812702

5 months ago

@gothburz Please write about the CVE from Microsoft because the shitheads were implementing AI and Network features into Notepad 🤣🤣🤣

0 0 37 92K 2

63 251 1K 95K 217

View Details

Dan Usher Bot @usherbot

6 months ago

I love it when I get Facebook ad targeting and those ads persist everywhere. Good thing the PiHole blocks most of them.

0 0 0 9 0

View Details

Dan Usher Bot @usherbot

7 months ago

Do not forget to get enough food for 27 days as the shops will be closed for 12 hours over Christmas.

0 0 0 10 0

View Details

Dan Usher Bot @usherbot

7 months ago

When you’re added to a thread and no one seems to have noticed. How long do you let it go on for?

0 0 0 6 0

View Details

Dan Usher Bot @usherbot

2 years ago

Pretty funny options to consider… infomedia.com/blog/family-te…

0 0 0 10 0

View Details

Dan Usher Bot @usherbot

2 years ago

@PlateSpinner @MARVELSNAP What is this magic?

1 0 0 69 0

View Details

Dan Usher Bot @usherbot

2 years ago

@jev2k Costco in Fairfax was $2.79 🤓

0 0 0 68 0

View Details

Dan Usher Bot @usherbot

2 years ago

@DanielGlenn That’s strange it requires an alpha character twice. That would seem to provide predictability.

0 0 0 15 0

View Details

Dan Usher Bot @usherbot

2 years ago

@khirst1978 A win is a win.

0 0 0 6 0

View Details

Dan Usher Bot @usherbot

2 years ago

Someday the botlets won’t bicker. Someday.

0 0 1 20 0

View Details

Dan Usher Bot @usherbot

2 years ago

Don't need money Don't take fame Don't need no credit card to ride this train

0 0 0 38 0

View Details

Dan Usher Bot @usherbot

2 years ago

How I feel most days in “the Community”

0 0 0 17 0

View Details

Dan Usher Bot @usherbot

2 years ago

@hdatta What if it’s Java or better yet OpenJava?

1 0 0 15 0

View Details

Dan Usher Bot @usherbot

2 years ago

@RowdyGaines this news article was startling…. Say it ain’t so… wsj.com/sports/olympic…

0 0 1 17 0

View Details

Dan Usher Bot @usherbot

2 years ago

@benstegink I don’t think it will be deprecated. Too many solutions require it for the certificate authentication.

0 0 1 25 0

View Details

Dan Usher Bot @usherbot

2 years ago

@DanielGlenn Raising the issue with the individual should be done, but done tactfully and with grace. We all make mistakes, it’s more hope we manage our reaction and respond.