Hacker News new | past | comments | ask | show | jobs | submit
jdiff | on: MS Paint Remote Code Execution Vulnerability
Seems odd even for a vibecoded copilot integration to make repeated, unprompted network requests. And if they're not repeated and unprompted, then we don't meet the "no user input" requirement.
TZubiri | parent
pretty standard to check for updates no?
jdiff | root | parent
For others, def. For paint, it's always been either OS-updated or store-updated.