@tiotasram@kolektiva.social @lmorchard@masto.hackers.town @catsalad@infosec.exchange @waynedixon@mastodon.social honestly starting to wonder why this is a vuln and what they fixed

I'm assuming it's launching URIs through the Windows handler for them, and you'd get the same results passing the same URI into the Run dialog?

although Notepad supporting rich text including Markdown is a choice, and not one I would've made, but.

@SteveFoerster @jbenjamint @mstrife @cstross photographic traffic enforcement that is set up to only record when an offense is detected, reviewed by a human for false positives, that allows due process for cases where a false positive slipped through the human, and that is set up primarily to discourage unsafe actions rather than generate revenue (as many US traffic cameras are) is *greatly* preferable for safety than having someone chase the car down (increasing danger for everyone on the path of the chase) to stop it.

(and, I know this is the UK, not the US, but in the US, that cop would always be armed. plenty of people have lost their lives as a result of trigger-happy cops doing routine traffic stops.)