smeg

tl;dr A network operator can perform a MitM attack on the built-in updater’s call-out checking for updates by faking the Notepad++ update website, telling it a new version is available at <malware URL> and then downloading and running the malware

It requires a malicious network operator, or preexisting malware on the host.

For myself, I make sure I’ve done my due diligence before I might accuse someone of dishonesty, rather than making a minimum effort.

From his Kofi: https://ko-fi.com/flukejones

I’ve burned out on LKML and many many other parts of the FOSS world. It’s exhausting. As such, I will not be working on Linux for asus device. It’s not something I can devote huge chunks of time to for free anymore.

Thank you everyone who has donated something over the last years.

Same on his Patreon

For example, the developer of asus-linux.org who made the kernel contributions for Asus ROG laptops and the accompanying ROG Control Center recently walked away, due to exhaustion.