Windows 11 Notepad to support Markdown
blogs.windows.com
blogs.windows.com
20260211 https://news.ycombinator.com/item?id=46971516 Windows Notepad App Remote Code Execution Vulnerability (804 points, 516 comments)
20260210 https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...
> "An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad"
Other recent Notepad issues:
20260207 https://news.ycombinator.com/item?id=46927098 Microsoft account bugs locked me out of Notepad – Are thin clients ruining PCs? (187 points, 284 comments)
20260127 https://news.ycombinator.com/item?id=46780451 Windows 11 January Update Breaks Notepad (60 points, 25 comments)
Windows 10 explorer.exe is 100x faster than Windows 11 explorer, it's not even close.
It also signals the death knell for Windows native apps. Microsoft can't make them anymore. It won't be long until even Excel is a Electron sloplication.
20231109 https://news.ycombinator.com/item?id=38212453 Windows 11 Update 23H2 is stealing users' IMAP credentials (666 points, 278 comments)
> the new Outlook is a thin wrapper around the cloud version, so the IMAP sync happens in the cloud, not locally
Btw, just before that I found this page regarding Edge, and this is why I paid more attention to these things: https://learn.microsoft.com/en-us/legal/microsoft-edge/priva...
That list is way too long for my taste, and it really indicated me that Windows became completely adversarial.
Somehow in this timeline AI can only be used to make things worse and sloppier
They forgot that Enterprises are made out of Users.
AI code that isn't properly guided and controlled by an engineer is just as sloppy as the human behind it.
AI is an accelerate for programming, but some developers create horrible code before AI, snd AI won't change that. It just lets them do it faster.
That being said, no one ever looked at good code and said "that's AI gold," so opinions may be skewed.
Think one step ahead. They will want you to pay them for some LLM "agent" to use the GUI instead. It's not important that GUI is human usable anymore, actually the opposite.
The inverse has been happening. AI seems to be best at JS and React, so many projects use this just to have the best results. I think this is the whole reason that Claude Code is actually React that's then mapped onto a terminal.
I don't think that was ever not the case. The popular UI toolkits include a WYSIWYG editor where you can pick widgets and just put them where you want them with the mouse. Sure, that might not be what developers like to use, but invoking a widget constructor is not that hard and gets you a lot more functionality out of the box, that you would need to implement in JS.
Cross-platform GUIs is also more of a problem of theory. It used to be a big thing, because the GUIs don't look native to the platform, but that concern has gone out of the window with websites now. Win32 programs run with WINE, which I guess is not desirable for deploying to ordinary users, but I guess the people who write for Win32 generally do not care much about porting their programs outside of MS Windows. GTK+ and Qt both run on MS Windows. TCL/Tk comes built-in with Python and looks native on MS Windows.
Encoding algorithms is not that much different across C-like (Algol-derived) languages. Registering callbacks also looks kind of the same. I guess what makes a real difference is the ubiquity of async in JS, where you would use threads more in native applications.
I think what is an actual difference is the mindset around styling and layout. This is something that you actually need to adapt. CSS is more declarative, much like writing constraints for sizes, because you just write a formula about e.g. size in relation to other sizes. On native toolkits you would need to implement this stuff imperatively, I guess this looks like a real downgrade coming from the web, but it is really just a different mindset. Also when you run on the actual machine you have actual access to the device/viewport characteristics and can adapt based on that, and don't need to write an abstract layout. The other side of the coin is that the default widget packaging mechanism has been grid based while CSS only gained that later.
What I guess is also easier in JS, is just drawing on a canvas. The native UI toolkits want to nudge you into implementing a custom widget which implements all the required functionality of widgets. That results in a way better interface for the user, but when you just want a raster graphic you can click on, it can feel like a huge waste of time.
Since now native toolkits also support CSS, have JS bindings and Webpage targets, a guess the difference blurs.
I have a hard time believing this. I'm pretty sensitive to performance losses and I haven't noticed any difference between those. It wouldn't make sense either, given they should both host the same shell icon views. Are you sure the difference you're seeing is in explorer.exe? As opposed to something else, like a new shell extension or a new filesystem filter driver on Windows 11?
Ultimately, what difference does it make? The file explorer in Windows 10 is much faster than the one in Windows 11, and it's very noticeable. Turn on the old context menus, and try right clicking a file. Instant in Windows 10, visible delay in Windows 11.
It does offer some new features for businesses. Nothing useful for the consumer, and nothing to justify the massive performance loss
An i9 with 128GB RAM isn’t enough resources to open a menu?
M$ has now introduced web-latency into the desktop along with their adoption of web-tech into the OS. You gotta get used to staring at that spinning blue circle, counting the many precious moments of your life draining away.
So we're back to the woes of Active Desktop on Windows 98. Everything old is new again.
Do you want the users to blame Microsoft, all Microsoft employees including catering and cleaning workers, and Gates personally? This is how you make the users blame all the before mentioned but not the culprit.
The new calculator even manages to screw up basic input. The old calculator accepted both commas and periods as decimal separator inputs. It just worked no matter what I typed in. The new calculator has some sort of "clever" localization where my inputs change depending on the language of the operating system. My language uses commas so of course it only accepts those. Infuriating. Hope whoever coded this is enjoying their promotion.
It wasn't very sophisticated. But it was fast and it handled commas and periods. It wasn't localized, but it could be.
Sad to think that me having a month of coding experience made a better product than MSFT, yet whoever coded the calculator is probably making ten times what I am right now.
To me it's not sad, it's infuriating. This corporation is worth a trillion dollars. Why can't they do their jobs? I'm sure the old calculator could be maintained and improved without screwing it up beyond belief. Send us some fat stacks and we'll do it.
> It looks like you're trying to calculate averages. Would you like help with that?
> Did you know Microsoft™ Office™ Excel™ has a formula for that? Rent Microsoft™ Office™ Excel™ today! Only $200/month in a perpetual payment plan!
What a time to be alive.
Prayer won't help you now ;)
With numbers >1000 they are of course displayed with thousands separators as 1,000 (text) now like you would see in financial reports, how attractive. Big numbers have a few commas too. No longer displayed as unseparated numerical constants, like you know, computers have always used.
And if you copy the figure from the calculator display, by right-clicking for the context menu or CTRL-C, you get the whole separated text with commas included to paste into where you need it.
So the receiving textbox you pasted to now needs to have the commas manually edited out before you can go forward, unlike any other Windows calculator.
I guess somebody forgot that people might want it to be at least as useful as it was since the 1990's.
You can still paste plain numeric text in without any commas, it just doesn't copy back out in the same usable format like it always did before.
You can't make this up.
A calculator is supposed to be the perfect example of a no-brainer :\
Edit: If you do the math it must have been more than one person who forgot, you have to think, is it even possible for one person alone to be responsible for quality declines like we have seen on their own? If so who would that be?
Just for the record, I just timed how long it took for the calculator to open. Eleven seconds. That's how long it took for it to display a window on the screen. A useless blue filled window that did nothing. It took a total of 17 seconds for it to show the calculator controls and be usable. This isn't a loaded machine, it's a freshly booted Windows system that's been at rest literally doing nothing for over five minutes. Notepad opened and was usable in less than one second.
Reminds me of the shitty gamer laptop manufacturer apps that would take over a minute to display a glorified rectangle on the screen. All this to configure keyboard LEDs. I reverse engineered that garbage and made a Linux version that works instantly, proving their incompetence.
Whatever it is that Microsoft is doing they should probably stop. A goddamn calculator application shouldn't require a high performance workstation to even launch. It worked fine before, now it takes ages and can't even handle input properly. That's stupid and there's really no excuse for it.
And that was orders of magnitude more than W98.
Your SSDs are getting hammered like never before.
The first time you open the new, sluggish replacements for old standbys they take way more time to load, but then if you don't turn off the PC completely they are already in memory lots of times so they pop up faster in subsequent times, and with simple things like Calculator the actual calculation is not any slower than it was in 1998.
At least as long as your PC hardware is 20X as fast :\
browser.urlbar.suggest.calculator = true
The slowdown appears to be due to XAML Islands, which allow legacy code to use modern MS UI stuff.
https://www.techindeep.com/why-is-windows-explorer-slow-7289...
Literally the best parts of Windows have been the parts they forgot existed for 10+ years and never changed.
maybe we should separate "real origianl text-only editor" from "fancy text editor"?
windows already got wordpad... why even lay a finger on textpad?
wtf why?????????
charge extra premium for a "secure vanilla-text™ pure unadulterated wysiwyg editor" experience should be a thing for the "security-minded" enterprises
The reason I dropped it was cause of a bug where I'd highlight text, copy, and it's actually copy the wrong block of text. Idk the trigger but seems related to larger files.
I'm being facetious of course, but this recent rhetorical trend of people confidently vouching for "pet" in "pet vs. cattle" is not a sustainable decision, even if it's admittedly plain practical on the short to medium run, or in given contexts even longer. It's just a dangerous and irresponsible lesson to blindly repeat I think.
Change happens. Evidently, while we can mechanistically rule out several classes of bugs now, RCEs are not one of those. Whatever additional guardrails they had in place, they failed to catch this *. I think it's significantly more honest to place the blame there if anywhere. If they can introduce an RCE to Notepad *, you can be confident they're introducing RCEs left and right to other components too **. With some additional contextual weighting of course.
* Small note on this specific CVE though: to the extent I looked into it [0], I'm not sure I find it reasonable to classify it as an RCE. It was a UX hiccup, the software was working as intended, the intention was just... maybe not quite wise enough.
** Under the interpretation that this was an RCE, which I question.
[0] https://www.zerodayinitiative.com/blog/2026/2/19/cve-2026-20...
Most people seem to see "CVE" and "RCE" and assume the worst here. As you saw though, Notepad is just making totally valid URIs clickable! Web browsers allow it too - why is it not an RCE there? Sure, they usually show a warning when the URI is going to something external but most people just click through things like that anyway.
Web browsers warn you about opening arbitrary protocols. And you have to select the program that will open it.
This Notepad vuln, allows you to click things like ssh://x....
Which just opens up SSH connecting to a server. Is that really RCE?
It'll also only work with URI schemes that are registered on your system. It's not running arbitrary commands - software you install on your PC registers URI schemes and sets what command it should run when opened. It's then up to that software to parse the URI and handle it properly. If it doesn't then the RCE belongs to them because they registered the URI scheme and failed to handle it securely. Having an allowlist of URI schemes in Notepad isn't going to fix it.
It works with your _locally_ registered protocols, not just the _remote_ protocols.
Which is why it works with JScript. And Powershell. And Visual Basic.
This is a bug that replicates why IE 4 was called insecure. Its not something that should ever surface again, today.
It is... The exact example of what an RCE is. _Local_ code executed by a _remote_ command.
> According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
> The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.
> For example, when the score indicates that the Attack Vector is Local and User Interaction is Required, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.
The low level tool that has served to rescue more systems than I can count does not need to "change" simply because "it happens, bro."
> while we can mechanistically
You can rule it out with process as well. As in "don't change what isn't broken."
> If they can introduce an RCE to Notepad
Then they clearly feel they have no viable competition. This is table stakes. Getting it wrong should lose you most of your customer base overnight. Companies actually used to _work_ this way.
What you find a trusty "low-level" tool is a demo application for a basic WYSIWYG text editor. They modernized it so that it remains being perceived that way, instead of letting it be increasingly misclassified as a legacy product for the enthusiast, like you just did.
Plus, judging by the image, it doesn't look like there's controls to interact with the plain text markdown. It seems more like it's a "you can use markdown _codes_ to trigger text formatting. Jira has exactly this, and it's horrible.
"No, it's the customers who are wrong."
For example, Bob's one-of-a-kind trusty server from which Bob is nigh inseparable, vs. a Docker container with a version controlled config you routinely tear down and bring up instances of, maybe even in an automated fashion.
Here this would map to trusty aged codebases you don't touch out of fear and caution, vs. codebases you can confidently touch because the spec, the code, the tests, the tooling, and the processes are solid.
Pets are projects that you toy with and keep adding new features, even when the main objective has been met. Cattle are projects that do what they are supposed to and are left alone.
I'd much rather have Notepad fall into the cattle category.
Write an app to display the (URL) argument passed and require the user to confirm or reject before running the browser using any of one or more default and configurable command line templates.
Add a "Install as default http, https, file:// uri handler" button in the settings gui. Prompt the user to install the app as default handler on first run.
Add opt-in optional debug logging of at least: {source_app_path:, url:, date_opened: } to a JSON lines log file
We know that markdown is text, we understand that text is text.
LLMs have very obviously been intentionally trained to work with markdown, specifically. Its prominence in LLM output far outweighs the real-world existence of raw Markdown online.
That’s the point that was being made.
What’s next. Are you going to say stochastic parrot?
Notepad's got Markdown, it's what LLMs crave.
Notepad is supposed to be a bare bones editor -- where you go when everything else fails. The VI of Windows. If they want a rich editor, they should bring back WordPad.
Can someone please explain why these two things are ever simultaneously true? You buy the stupid Copilot+ PC that has "AI" NPU hardware, right? So the AI features should be able to run locally. But if you have to sign in with a Microsoft account, then surely, it doesn't run locally, which begs the question, why does it require a Copilot+ PC at all?
Not even going to bother asking "does anybody want this to begin with" because at this point there is no real need to bother asking that.
Everything MS is doing in Windows is to this end.
They got to like step 3 of their 10 step master plan and gave up and have been lingering there.
Microsoft has been a walking husk of a company for the past decade and a half that somehow inexplicably stumbled into a trillion dollar valuation.
My two favourite 'AI' tools in image editing have been ones that can replace tedious work.
One such example are segmentation models that can be used for smart cutouts, removing backgrounds etc.
Now we have both 'segmentation' and 'AI' in paint - but the segmentation uses the exact same shitty flood fill with tolerance that's probably existed in the first paint program at Xerox PARC, while the 'AI' feature is another by-the-numbers crappy stable diffusion model that's strictly worse than anything you could get with your first Google search.
(I found an odd one: for some reason I can't log into my PC with my MS account, which let me create the local account I actually wanted. System broken in my favor.)
Windows feels like it has a lot of attrition from home users now and perhaps it is only a matter of time before it's no longer worth writing exclusive software for it.
Its is Micro$oft after all :P
The reason we're getting this AI gumbo is that obviously the product people at M$ we're told: "Make money by selling AI features!!!". Which flipped their minds from their usual "I am Steve Jobs" fantasies, which tell them to _consider the User experience first_, to _Consider the companie$ experience first_, and they can't keep the two concepts in their little heads at the same time because they are, after all, just product people.
The there was a brief moment where it became decent. Still a barebones text editor, but it could actually edit text, what I think most people expected Notepad to be.
And now, it is going the other way, with "AI" features no one wanted, and also "Markdown support" which is ironic since Markdown is designed to look good in a regular text editor. Now we have something that isn't really a text editor, but not really a wysiwyg editor either, it has some advanced features like AI, but is lacking features most other semi-advanced text editors have (ex: syntax highlighting).
At least, it was good for a couple of years.
Isn’t it boring when a piece of software is just complete? In fact that’s an unacceptable state for it!
step 2: omg there's demand for features
step 3: turn notepad, whose point was to be a dumb simple thing, into a wordpad
step 4: get a raise because you "solved" the problem
I’m willing to bet that adding markdown to Notepad was a lot simpler than trying to make it work in Wordpad, especially since you’d probably still have to support rich text.
There is configurable syntax highlighting in vscode.
Should an app like Notepad ever embed a WebView? (with e.g. tauri-apps/wry instead of CEF now FWIU)? Not even for a Markdown Preview feature IMHO.
The RichEdit control handles parsing RTF (I believe there was a CVE-level bug about RTF-handling in RichEdit - ahh - here we go https://www.kb.cert.org/vuls/id/368132/), the programmer/app is insulated from grokking RTF.
Here's sample code for opening an RTF file - https://learn.microsoft.com/en-us/windows/win32/controls/use...
Adding realtime conversion of text-only Markdown to the processed-richtext Markdown is slightly more difficult than an instant message-type edit control converting a text :) to a unicode emoji character representing :)
You'd have some bookkeeping to remember which lines are markdown and which are plain text. But it's not rocket science.
Imagine Win11-Notepad as WordPad with all the UI for rich text formatting disabled.
Exchange 4.0 email client app (shipped in 1996) had a Win16-bit version which included RichEdit.
see https://learn.microsoft.com/en-us/archive/blogs/murrays/rich...
Step 6: GOTO 1.
Make Microsoft Edit a Lightweight 'VS Code for the Terminal' - https://github.com/microsoft/edit/discussions/682
Atleast he has the decency to ask for stuff first and being straight.
Hilarious comment by the way https://github.com/microsoft/edit/discussions/682#discussion...
> I concur, but there are two issues with this: Building the foundation of an editor is way harder than building features later on top of that, and currently it is unlikely that Microsoft will fund me to spend half a year working purely on this project. So, I'll work on this whenever I can, which is not much.
Maybe they're referring to the plugin system they want to implement: https://github.com/microsoft/edit/issues/17
When they introduced a mobile first UI onto a desktop OS...
When they forced mandatory Microsoft accounts...
When they started saving files that had no place being in one drive to the cloud by default and charging people for it...
When they announced the worst AI privacy disaster in computing OS history...
When their updates refused to install cleanly and bricked people's computer to the point of hardware damage...
Seriously thinking I might have Stockholm syndrome at this point. To me the best windows would be Windows 11's kernel and libraries with Windows 7's UI and apps. Because it's been all down hill (generally) since there.
Does anyone now how to achieve that? What happens when you replace the kernel in a Windows 7 installation with the one from Windows 11? How is the manual update procedure for kernels on MS Windows?
For me it's currently the minimal-hassle way to make my Steam library runnable. But it feels like we're moving in a good direction thanks to Valve's efforts where one day I may be able to never boot into Windows on my PC.
That's when I jumped to Macs and haven't looked back since. Windows is just a glorified game console to me now, but I have enough fun with PS5/Switch exclusives.
Though macOS is also becoming annoying, not quite to that breaking point yet, but worrying
Meanwhile Linuxland seems like a chaos of 10000 people who all think they're right, under an anal overlord
Maybe it's time to dig the Commodore 64 back up? :')
But who cares though, soon AI will make operating systems meaningless, right?
The creator is also very selective about the type of politics he supports.
Why would someone express political messages without being selective? It’s understandable not wanting overt politics in your software, but this line is odd.
https://en.wikipedia.org/wiki/Notepad%2B%2B#Political_messag...
The possibility of software being a personal, creative, expressive endeavor (which often includes politics), something I believed in back when I was in university twenty years ago, is a feeling that's receded deeply into the past. That might be as much about me as it is about the world, but I miss it.
That said, if software is a personal creative expression, one must be prepared for the possibility that some people aren't going to like what one has to say. Often when the politics angle comes up with Notepad++, people will say "it's his software project, he has the right to put in political messages if he wants" as if that somehow compels people to be ok with the political messages. The author certainly has the right to use Notepad++ as a platform for his political opinions, and I would never dream of saying otherwise. I don't want him to go to jail, or get fired by his employer, or anything like that. But I similarly have the right to decide that I don't want to see his political opinions and use another piece of software. You pick up both ends of the stick, as the old saying says.
the moment software stops being neutral, it becomes a target
But, at the same time, that's exactly the sort of thinking that's killed off that feeling I'm sentimental for. As a free human being, I don't want to live in fear of expressing my political views; and as someone who wants to view the software I make as a form of art or expression, I don't want to be afraid to express my political views through my software either. Should a writer avoid being political for fear of becoming a target? For fear of their books or readers becoming a target?
as a program that tries to be used by others - stay in your lane, you are not an opinion cesspool, you are here to do work and let others do it too
You're not changing people's minds and you're simultaneously agitating both many of those who disagree with you as well as plenty who are neutral or even agree with you, as seeing politics shoved somewhere it doesn't belong is something many people do not appreciate, regardless of how those politics may or may not align with their own.
And political signaling can also make you look bad even to the audience that might ideologically agree with you. For instance notepad++ takes a position on essentially every big controversial US geopolitical issue, but they are conspicuously silent on the Gaza issue. If they hadn't taken on any political positions, this isn't an issue. But when they take a position on every divisive issue, suddenly their not taking a position on one like this effectively is taking a position, but it's one that (for once) they don't want to say.
If anything, I could stand for most things to be just a bit more political than them. Most things are way more political than that.
It's already made the software a target for hacking amongst other things. Taking positions that resonate with perhaps half the people in 15% of the world, and piss off a sizable chunk of people in the remaining 85% of the world is not a great idea. And, from my perspective, it's not just about self defense - but why do you even want to do that?
I hold some fringe views relative to many on here at least, and I don't make any secret of it either - but imagine by username was like 'IllegalImmigrantsAreIllegal' or something. It'd be like 'oh cool, I see you're 13.' I see this as something along the same lines. If the topic comes up, it comes up, but making it a part of your identity is childish and antagonistic.
For a UI I’ve been using VSCode. It is quite quick when you disable all extensions and most settings.
> eMacs
I love Emacs, but I don't see how a Lisp platform with a web browser, a Tetris implementation, and 4 terminal emulators (shell, term, ansi-term, eshell) can be considered 'lightweight'.
(Also, a lot of that stuff comes bundled with Emacs out-of-the-box, further disqualifying it. Having a scripting engine is one thing, but having a scripting engine along with the whole rest of the jet is something else entirely!)
As someone famous said, "everything is relative" :) Compared to the new applications that have been coming out, Emacs and vim are a paragon of lightness.
On that note, why are the keybindings for vi on a “modern” Ubuntu different from fedoras? I remember having to mess with ^H in a vimrc or something to that effect to mimic the behavior I was expecting.
VSZ RSS MAXRSS COMMAND
13240 2896 2896 /usr/bin/vi x.txt
45412 15212 15212 /usr/pkg/bin/vim x.txtTheyre also very political and giving them access to my machine now feels even more risky.
A key benefit of it is that it's not an electron app. It's an old C++ app that's still just chuggin' along.
So the people taking pot shots at the developers, I guess, maybe be more specific with what they did wrong and what they should have done instead. Because if you actually understand the history/circumstances (and the fact it was a third-party hosting provider compromised), one would expect more blame on the systemic under-funding of OSS than "developers bad."
Are people wanting them to create a business, monetize Notepad++, so that they no longer have issues with hosting/certificates? I'm guessing not.
20260202 https://news.ycombinator.com/item?id=46851548 Notepad++ hijacked by state-sponsored actors (917 points, 543 comments)
20260203 https://news.ycombinator.com/item?id=46878338 Notepad++ supply chain attack breakdown (384 points, 198 comments)
20250630 https://news.ycombinator.com/item?id=44426049 High-Severity Vulnerability in Notepad++ (39 points, 14 comments)
20230904 https://news.ycombinator.com/item?id=37385920 Multiple Notepad++ Flaws Let Attackers Execute Arbitrary Code (83 points, 39 comments)
20230830 https://news.ycombinator.com/item?id=37320304 Buffer Overflows in Notepad++ (68 points, 61 comments)
20230829 https://news.ycombinator.com/item?id=37311068 Notepad++ v8.5.6 still vulnerable to possible arbitrary code execution (18 points, 3 comments)
20211209 https://news.ycombinator.com/item?id=29499002 StrongPity variant hides behind Notepad++ installation (45 points, 28 comments)
20191030 https://news.ycombinator.com/item?id=21395251 Notepad++ issues attacked by Chinese commenters (237 points, 110 comments)
20191030 https://news.ycombinator.com/item?id=21400526 Notepad++ repository is being spammed after “Free Uyghur” release (82 points, 36 comments)
20190317 https://news.ycombinator.com/item?id=19329330 Notepad++ drops code signing for its releases (496 points, 327 comments)
20170308 https://news.ycombinator.com/item?id=13824032 Notepad++ V 7.3.3 – Fix CIA Hacking Notepad++ Issue (1101 points, 291 comments)
20150112 https://news.ycombinator.com/item?id=8876823 Notepad ++ hacked for Je Suis Charlie comments(web archive link) (65 points, 74 comments)
Plus this Markdown preview functionality just caused Notepad to have a Remote Code Execution Vulnerability in it.
They can add as much AI and Markdown as they want to Wordpad as far as I'm concerned. Just leave my dumb featureless utility alone.
You can make old Notepad be the default cmd line by going to Apps > Advanced app settings > App execution aliases, and disable the Notepad setting
EDIT: yes it does and it has actually been updated yesterday.
Assuming most people don’t need to open 16TB files, they might as well use VS Code.
The subscription isn't awesome, but it works fine without it, and doesn't pester alot
It can be installed easily via chocolatey.
0) Set "When Notepad starts" option to "Start new session and discard unsaved changes"
1) New file
2) Type "abc" - note the "X" to close the file changes to a "O" (pretend that's a circle) to indicate unsaved changes
3) Save file - "O" changes back to "X"
4) Type "def" - "X" changes back to "O" because "def" is not on the file on disk
5) Undo, "def" disappears, "O" incorrectly remains...
6) Redo, "def" reappears, "O" incorrectly changes back to "X"
7) Close file. No prompt to save unsaved "def". Reopen file. "def" is gone
That option is much better than getting the undo/redo vs unsaved changes tracking wrong and allowing unsaved changes to be easily lost, like notepad does. :-P
> Unsupported Syntax Detected
> This file contains syntax that isn't fully supported in formatted view. Some content may not render as intended, and switching views could modify parts of your original Markdown. Do you want to continue?
That was before MS started vibecoding all their software.
Article: People systematically overlook subtractive changes - https://www.nature.com/articles/s41586-021-03380-y
(Modulo CR/LF, of course.)
For example, a prompt when opening the file like: "It's unclear what kind of data this is, here are a few options with a preview, pick which one you'd like me to use."
Annoying, but them's the breaks when you're making software and aren't willing to put in hard requirements about what it is expected to (not) operate on.
Apps like classic notepad are useful to have around, when apps that try to parse things like markdown get it wrong and the underlying file needs to be fixed.
All I really need is a basic text box with a scroll bar, and a way to feed it with bytes from a file.
To make it a well-defined challenge: the task is to find a way to create a basic notepad - a multi-line textbox that supports scrolling, and can be fed bytes from a file to render as text directly. Additionally, this must be achievable through simple means - simple enough to memorize - and must work on standard Windows 11 installation, with no extra dependencies to procure. Solution can be e.g. something I can type from memory into "Run" (Win+R) box, but could also be a short list of GUI steps (e.g. open some program, click on "Help", drag file to help box).
I can confirm it exists on my Windows 11 machine, and I didn't install it specifically, though it's definitely not a base install (upgraded from Windows 10, and plenty of dev tooling installed over the years). Still, it fits the bill (+/- GUI, but I didn't consider TUI at all). Thanks!
Note that my link is dated 2023, whereas Wikipedia says that Microsoft Edit was first released in 2025: https://en.wikipedia.org/wiki/MS-DOS_Editor
As someone who (mercifully) only occasionally has to touch Windows machines, I keep forgetting this, and then when I try to do stuff I’m flabbergasted that the operating system does not include a terminal text editor. (In a fit of pure desperation I even typed EDLIN into the Command Prompt — no go ;)
That was the case with Win11 about a year ago; if they finally started shipping EDIT64 then hey, that’s one positive recent change in Windows I suppose.
copy con file_to_edit.txt
That's what web search told me, but then looking at the remarks in docs for `copy`[0], I have to wonder if this works now, and if it would've worked back then:
copy prefix.txt+con+suffix.txt output.txt
(`more` would come in handy here, but AIUI, there's no way to run it non-interactively in cmd.exe? Don't have a Windows machine handy to check it right now.)
--
[0] - https://learn.microsoft.com/en-us/windows-server/administrat...
This does indeed work in proper MS-DOS. Congratulations for figuring out probably the single most masochistic way of accomplishing text editing ;)
So it turns out, EDIT.COM was one of the first - if not the first - computer programs I ever saw and used, back when the first PC showed up in the house. For some reason, someone in the family guessed that 9yo me will be interested in DOS and QBasic. A few years later, I used it from Windows for some time, when I was learning X86 assembly (I wanted to learn how to make a video game, so I went to the local library looking for some "intro to programming" book, and mistakes were made).
Afterwards, it was Borland C++ 3.1 (another TUI classic) and vim/Emacs, and I forgot about EDIT.com entirely. This new Microsoft Edit is something new, and something else, but similar enough that it brought those memories back.
Thanks again!
https://github.com/reactos/reactos/tree/master/base/applicat...
Maybe someone should submit a feature request for it.
What's next, in a few years we're rocking EDLIN when we need to operate on a text file safely?
edit.exe[1,2] actually. And it runs on Linux too! Linux had a real lack of good text editors.
This isn't bad at all given how most other software evolved in thr the intervening 30 years.
^+v::
Clipboard:=Clipboard
Send ^v
Cmd-L Cmd-V Cmd-A Cmd-C
(swap for Cmd for Ctrl on non-Mac)
Meanwhile, 2 weeks ago:
Windows Notepad App Remote Code Execution Vulnerability
Notepad was never fancy, but it was a reliable tool to strip formatting or take a quick note, and now I cannot even count on that.
Markdown presents a chicken-&-egg scenario that has dragged on for decades: tons of Markdown documents, but almost nothing with which to simply view (not edit) them as intended. Mystifying.
I know there are others and there are fine points. I would like to see a couple minor additions to support image placement (that aligns with Medium's editor) and finally a strike-through text notation. But that's about it.
I think this explains the lack of viewers; they are simply not needed.
(also seeing all those marks isn't aesthetically good, hence the need for a viewer)
Second: If the formatting codes are going to be ignored by all the viewing applications, why are they in the document in the first place?
Every time this comes up, someone floats this weird "but all you need is a text viewer" argument... indicating that Markdown is pointless.
Markdown viewer for Linux
Let's just say I haven't concluded my testing yet, it's ongoing :)
You need to buy 5 regular Windows licenses and then you'll be able to unlock the LTSC option. It works out to about $300.
(Update: Ah, title is a little misleading. This update doesn't introduce Markdown, it adds support for nested Markdown lists etc.)
Personally, I think they should've kept Notepad as-is and reincarnated WordPad instead, rewriting it and giving it Markdown instead of RTF. It already had the basic formatting interface and all. It would've been a pretty smooth transition.
The problem is that Markdown supports quite a bit, even tables, which lends to feature creep. It was already more sluggish without any of this due to moving Notepad to WinUI.
Maybe I'd mind it less if they put the new MS Edit in Windows by default, so again, there's a minimal plain text editor in the box.
Confused the hell out of me recently when I was looking for Office 365 on their website.
But in the world we seem to be heading toward, where you can only log into Windows with a Microsoft account, and where your Microsoft 365 subscription state controls which "edition" or "desktop experience" of Windows you get as said logged-in user (regardless of which machine you're logged into)... there'd be no need for Wordpad.
In that world, Word the software package would always be pre-installed. (Why? Because even if you aren't paying for M365, someone who is could always log into your PC as a roaming user; and that person would want Word to work immediately without having to wait for it to download+install.)
And in a world where Word the software package is always preinstalled, then Microsoft could just let anyone launch Word (whether they have an M365 subscription or not); and then, at launch, rather than just putting a paywall in the face of anyone without an M365 subscription, Word could instead use the logged-in user's M365 licensing state to determine whether the spun-up Word process should run the full-fat Word UI, or some kind of degraded unpaid-mode Word UI.
And "Word running with some kind of degraded unpaid-mode UI" could be every bit the "Word lite" offering that Wordpad is. Which makes Wordpad itself redundant.
(The only weird part to me, is that they deprecated/removed Wordpad before pulling the trigger on all of this.)
This doesn't seem like a good idea.
wordpad is all-included on its own
Then I'd probably have a decent print to pdf function as part of it.
Do you need to log in to notepad now? What in the actual hell is going on?
This new "Edit" is completely tone-deaf in that it doesn't keep the keybindings from Notepad (i.e. no CTRL-H for find/replace, no F5 for the current date/time). You can't turn off the status bar or the line numbers. It doesn't follow the OS theme (instead pretending to be a text-mode application). It tries to be "helpful" with indentation.
At least they bothered to get Find Next with F3 right.
It would have been immensely better if they'd just ported the old MS-DOS EDIT / QBASIC over to Windows.
And WordPad was built on top of the "RICHEDIT" window class, and exposed lots of the OLE features provided by the rich text control. "Insert Object" is a powerful and potentially dangerous feature with a lineage going back to the Windows 3.1 days. As long as your DLL is registered correctly, any document in an OLE-capable program can cause objects from that DLL to become instantiated and deserialized.
Getting rid of documents able to instantiate arbitrary OLE controls is a good reason to try to remove WordPad. It's not just some simple styled text editor.
This tool would have been so useful 25 years ago when I had to manually recolour every pixel in the contour of the cool photo I was editing for my new desktop background because the fill tool didn't recognise the background properly.
Bear is my fallback on iOS, but I much prefer some of the themes available for Typora, and simple files in folders over tagging.
It's a drop-in replacement for Notepad that does add a few extra features, but does not have even the minimal suite of features that something like Notepad++ has. Where Notepad++ is great for code editing and extensible functionality via plugins, Notepad2 is more suited for people who just want Notepad, without the Windows/Microsoft. It has line numbers and (limited) syntax highlighting and a dark mode - bits and bobs like that - but it does not have tabs and ftp-on-save and the more complex stuff that requires a larger binary size.
It's free, it works like Notepad, and it acts like a bare bones text editor. In many, many cases, it's exactly what I want, and it's always exactly what I want in cases where my original intention would have been to use Windows' Notepad.
Oh boy.
But this is just following a pattern, the enshittified even calc.exe and mspaint. Previewing pictures in windows is shamefully slow because the previewer is also a bloat.
My diagnosis is that Microsoft doesn't have good technical leadership. It has spread the risk of bad decisions by individual leaders by spreading it amongst too many decision makers, and those people aren't always technically apt, or they have aptitude within their specific domain of expertise. Why is the start menu in react native for example.
they also have a crippling illness in the form of sunken-cost fallacy. Even when no one is especially depending on it, they go all-or-nothing on tech stacks and design patterns. Marketing and branding ultimately, I think is their biggest problem. You know how they name everything terribly? that's trying to capitalize on existing branding. This is fundamentally the mindset of salespeople. they could be spinning a new app, or making a vscode-lite ship with windows, but brand familiarity is why they're messing with notepad.
It is truly dumbfounding, they're being run like HP and IBM but because of how much the world relies on them, and because of Azure they're making so much profit.
Why are the shareholders no enraged even more? To have such a vast marketshare and failing to capitalize on it is terrible. They could be doing better than Apple. Even apple sees the writing on the wall and adapts their strategy fundamentally by starting to make their own silicon. It's like having a barn full of chicken that lay golden eggs, but the farmer is slaughtering them for their meat, and the farmer's employer doesn't care because chicken meat is still making good enough profits.
It's funny because they are actively destroying existing branding these days. Like how they renamed Office after their failed AI assistant, rather than the other way around.
From the security side, everything is Microsoft Defender. When talking to people I have to say things like "defender but the AV thing that's on by default, not the paid cloud thingy, and by that I don't mean the cloud protection one but the thing that protects endpoints using cloud stuff". They can't come up with good names and they confuse the crap out of their users. I hate to say it's just MBAs, since I don't really know but that'd be my guess. Someone at an Ivy league school somewhere is perpetuating this perhaps?
Is there anything big and exciting out there still driven by taste and vision rather than metric bumps?
Microsoft has already positioned VS Code as its code editor and OneNote as its notetaking app. Why should Notepad compete with these offerings?
Anyone's got the CEO's number?
Tell him I don't charge for my genius management advice most of the time.
Before you know it every month this thing will appear over the top of what you actually want to do.
I never use Notepad anymore. I have been using Pulsar, which is okay, but not exactly what I want.
I want a text editor that can do markdown if I want, spell check, minimal tool bar with some formatting shortcuts, etc.
I'd love it if a "dumbed down Typora" had a love child with Notepad.
Surprisingly, some of the projects such as AkelPad are still alive.
Win32 made things easier, as well as things like Delphi and Scintilla later.
Just checked my archives, and my own naive but functioning attempt measures whole whopping 36520 bytes, though not without the help of an executable packer, which was a fashion then.
Mostly works fine under Wine, though it is about the legal US drinking age.
It looks like to me that it stores its settings at "%LOCALAPPDATA%\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\Settings\settings.dat", which is some binary format.
Why is registry being abandoned? If it is, why isn't ini or json or a plain text format used? Who are working at Microsoft now, abandoning both the windows ways to approach tasks, and also the other generic sane default approaches?
I'm looking for a plain and simple text editor with no programmers' features—no line numbers, syntax highlighting, etc.—no tabs or MDI whatsoever. No, I'm not looking for something with "you can turn these off", just a complete reimplementation of Win95 Notepad made via black-box testing.
I also like sometimes having multiple files open at once and drag the windows around my monitors as I need to and you can't do that in Notepad++.
Also Notepad++'s UI is bloated. There's just too much going on.
And please don't suggest I muck around in settings, I'm not interested in spending hours mucking around in a gigantic bloated settings dialog, I want something that Just Works™ with no configuration just like Win95 Notepad.
Edit: My specific use case here is for viewing files, not editing them. I use a different editor when I'm actually writing stuff but for browsing I just want old Notepad.
Maybe Notepad is actually saving LF, but marks the file as CRLF and some WSL translation layer then triggers and removes LF, because they are not CRLF?
I hope they give notepad a keyboard shortcut to transition to ascii only like textedit has on the Mac
They are convinced it needs to be a worse vscode when all I want is something to edit plain text files.
Adding RTF and a wysiwyg markdown editor is the last thing that I want from something like notepad. When I open notepad, I still want to see the characters that are present. Heck, I'd like to be able to see the difference between a space and a tab. I'd want to be able to see which type of line ending are being used (and switch to the correct one, \n) Hiding characters is antithetical to the reason I'd use notepad in the first place.
I want to be able to search text and see text. Not compose a document or talk to an LLM.
So install Kate? There's a Windows build.
choco install kate
I tried to take advantage of it, but the implementation felt really clunky (formatting seemed to be via menus only), so I’ve stuck with .txt files.
> To use Coloring book, you will need to sign in with your Microsoft account.
you will need to sign in with your Microsoft account. My god they love to identify you.
Notepad should be last thing they should be fiddling with.
I am sad that we have to install 3rd parties for basics now.
( In case you forgot: https://www.youtube.com/shorts/Vw1rMkUFqyc )
edit: just checked the version that ships with Steam on Linux, yep, works great in a VM
- Notepad: Plain Text
- Wordpad: Rich Text
- Word: Documents
Seriously? Markdown is the preferred method for rich text these days, so why didn't they just turn WordPad into a WYSIWYG Markdown editor?
They also shove Copilot into it, but that's a whole different problem. Who is this current iteration of Notepad actually made for?
- There wasn't anything that comes with Windows that natively supports it (before now)
- All your favorite text editors don't support it natively, and plugins vary
- You can pay for a nice markdown editor but for some reason your more powerful usual text editor is still free?
- You can open VSCode, which is hilarious overkill if you just want to take some notes. Obsidian is excellent but same problem.
- Maybe something I'm missing?
Basically I think it is a great thing if I just get a lightweight markdown friendly editor built in, because I'll probably use it all the time.
...except if it immediately leads to a CVE, I guess.
The whole point of notepad was a plain text editor.
Wordpad was the lightweight document creation software.
Lately I've been doing the same for other small utilities. Roughly half the little tools I use are ones I generated and kept because they’re predictable and easy to audit.
The point isn't replacing built-ins; it's reducing dependence on shifting defaults. I want to care less about what the software/os vendor changes this time.
I recently used Windows Sandbox and was surprised that it does not have notepad. And why? Because it's a Store App now and that's unsupported inside the Windows Sandbox.
Notepad is supposed to be dumb, not Microsoft!
I can't even get visual studio code to stop showing that right-hand sidebar every time it opens up, regardless of what settings I use. It seems to work for a while, and then it appears again like magic.
I'm not sure how many more times they have to hit you straight in the face before you realize you're a victim here and need to get away from the abuser as much as you can, not try to "salvage" the situation.
recent vuln asside (big caveat ill admit) idk why you would use notepad at all when N++ exists
I do think notepad recently got those, but for a long time it was a compelling reason to use notepad++.
And you can avoid copilot.
Get-AppxProvisionedPackage -Online | Where-Object { $_.PackageName -like 'Microsoft.WindowsNotepad*' } | Remove-AppxProvisionedPackage -Online
I’d expect better from an HN user.
I don't have the bandwidth to babysit all the different ways MSFT tries to break tools to bother using them.
Defaults should not be offensive. If you try to kill me with papercuts, I will stop using your software and never look back.
It's not fine just because you sneak a button to (temporarily) get rid of it. Just make features worth enabling instead.
Easiest way to do that is to use Linux instead.
I welcome it, because hopefully that will be less people having a meltdown over an icon on a menu bar.
There's a keyboard shortcut for it. I never figured out quite what it was, but every now and again Copilot would open itself while I was using Visual Studio or Emacs on my Windows 11 desktop PC. I assume I'm either hitting the shortcut, or a ghost key on my keyboard is stepping in and hitting it for me. (I could never reproduce this by pressing Windows+C.)
Copilot does stuff in the background. What stuff? I don't know. But, occasionally, on my desktop PC, I'd get a message box popping up saying that Copilot was unable to open this or that file. (Though, yes, perhaps it is just opening that file for no reason. Hard to say.)
(Both of these went away when I removed all the Copilot apps from the list of startup stuff.)
Copilot can be persuaded to get itself into a state where it expects you to log in. I had this happen on my old Windows 10 laptop somehow, when I logged in as my (local only) work user, something that existed to let me sign in to my old employer's Teams setup, their VPN, and use Remote Desktop to my work PC. And each time I logged in to my laptop, Copilot would pop up a login dialog. Though I can't deny that this was a handy reminder to remind me to quit it.
So instead of troubleshooting you went straight to "oh my god this is the end of days!" These seem like obvious user error or at worst bugs.
Not to mention you've pivoted from Copilot in Notepad to Copilot in general. Which are not the same thing. Copilot is a brand name and various instances of it are not connected at all.
Unfortunately, you started with the first 2 paragraphs, so clearly you're more interested in moaning at me. But this is the internet, so that's fine. I already expected it. In fact, I'm disappointed. You're going to have to try harder.
Is it because the average person isn't as tech savvy as most (if not all) HN readers to know any better, and those companies want the headcount of usage to look high to please stakeholders?
Enshittification at its finest stink.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...
Fun fact: you can uninstall Notepad if you don’t like it.
Microsoft decided that additional complexity for the notepad application is worth the tradeoffs. I tend to agree with them: Notepad is traditionally most heavily used to peruse readme files, which today are primarily written in Markdown. Therefore, having Markdown support as a first-class feature makes good sense.
Furthermore, I point out that it is an optional application that can be uninstalled.
but i dont think most people here are complaining because of security risk... otherwise they wouldnt be recommending things like notepad++, other obscure editors, or editors with way larger code bases.
Fun fact: you can uninstall Notepad!
The truth is, unless Notepad got some kind of makeover, it was a useless vestige. It obviously wasn’t a good text editor for plain monospaced text. Having basically zero features didn’t serve anyone - why not use Notepad++ or vim in that case?
I think the most popular use of notepad is to read text files quickly and these days that often includes Markdown files. It makes perfect sense for Notepad to evolve into something that’s actually useful for lightly formatted text formats.
But we think we're right and still we thought they were wrong.
If we were in a PHP forum, this would be my signature: I'm getting too old for this shit.
Just make your own damn notepad if it bothers you lol.
If you use many different machines throughout your workday, this means you have to carry a copy of your bespoke solution with you on a memory stick or something, and hope that the machine you want to use it on allows the use of memory sticks or unapproved software.
It's far better to use an application that you can count on already existing on the machines.
I even worked on an app in a relatively secure environment where the work around for an early SPA and IE6-8 company wide, was for the systems analysts using our app to use a portable firefox browser on the user desktop. IE6-8 in particular were really bad when you had an SPA as you had events tied to dom elements across the COM bridge that wouldn't release unless all dom and script references were freed up. jQuery actually did this, if you managed everything through it, but our app was an early version of extjs... so after 3-4 hours it would just run out of memory and die.
How so? If all you do is load plaintext, you’ll never come across this feature. Even if you do, what’s the problem?
I've spent a long time building up my muscle memory. I don't want my tools changing out from under me. If they wanted to ship an "enhanced" notepad they should have called its something else.
Somebody should probably tell Microsoft we’ve all moved on to better things like Notepad++ (even when their update supply chain gets compromised).