no f***ing way
ChaptersAI

no f***ing way

Low Level
8:17
Feb 12, 2026
159.0K views
7.7K
Show description

Go secure your notepad.exe with Threatlocker! https://go.lowlevel.tv/threatlocker2026 Next time you hear zero trust, give threatlocker a shot. PoC: https://github.com/BTtea/CVE-2026-20841-PoC 🏫 MY COURSES Sign-up for my FREE 3-Day C Course: https://lowlevel.academy 🧙‍♂️ HACK YOUR CAREER Wanna learn to hack? Join my new CTF platform: https://stacksmash.io 🔥COME HANG OUT Check out my other stuff: https://lowlevel.tv

Have questions about this video?

Sign up to chat with AI and get deeper insights.

Sign up — 5 free credits
Windows 11 vulnerabilities
Markdown file execution
Software security
Feature bloat and impact
Endpoint protection solutions
Zero trust security
User interface design
TL;DR

The video discusses a vulnerability in Windows 11 Notepad that allows remote code execution via markdown links. The creator critiques the feature bloat in simple utilities and emphasizes security precautions.

8
Watch Score

The video provides valuable insights into a current security issue and offers solutions.

2/10
Clickbait
mixed
Sentiment
Should watch

Those interested in cybersecurity, particularly related to software vulnerabilities and user protections.

Can skip

Viewers looking for entertainment or simplicity in tech content might find it less engaging.

Quality (8/10)

The video provides a thorough analysis of a specific vulnerability while being informative about related security practices.

Clickbait (2/10)

The title is attention-grabbing, but the content provides a nuanced perspective.

Sponsorship Detected
Threat Locker — ~90s
Summary
In this video, the creator addresses a newly discovered flaw in Windows 11 Notepad that can permit the silent execution of files when a user interacts with specially crafted markdown links. While the headline may sound alarming, the creator contends that the vulnerability is not as significant as it has been portrayed online. They stress the importance of understanding the context surrounding this flaw and highlight the concept of 'feature bloat' in software utilities, particularly with Notepad. The commentary provides a breakdown of how markdown works and why the flaw is attributed to handling links unsafely, allowing for potential exploitation. By showing a practical demonstration of the execution request, the creator illustrates the actual impact the vulnerability can have. However, they caution viewers not to overstate the risks associated with it, explaining that user interaction is required to trigger the vulnerability. Furthermore, the creator discusses the idea that the addition of new features, such as markdown rendering capabilities, led to this vulnerability. By maintaining Notepad's original simplicity, the creator claims that such flaws may have been avoidable. They point out the risky trend of adding features to tools that are otherwise functional, suggesting that it complicates security and blurs the lines of trust regarding what software should or shouldn't be able to do. Lastly, the video includes a sponsored segment from Threat Locker, which provides endpoint protection solutions geared towards preventing unauthorized access to computer systems. They demonstrate how Threat Locker can effectively limit what applications can do, emphasizing the need for robust security measures amid the evolving complexities introduced by increasing software features.
Key Takeaways
  • Windows 11 Notepad has a vulnerability allowing for remote code execution via markdown links.
  • The creator believes the flaw is overstated and requires user action to exploit.
  • Feature bloat in software can lead to increased vulnerabilities.
  • Markdown is a formatting language that can be used in Notepad but comes with risks.
  • User interfaces should prioritize simplicity to prevent security issues.
  • Zero trust security measures could help mitigate risks associated with features like markdown rendering.
  • Overengineering tools can create confusion regarding their security posture.
  • Threat Locker is presented as a viable solution to endpoint protection.
  • There is skepticism regarding the idea that new technologies like AI are the sole cause of such vulnerabilities.
  • Developers should avoid adding unnecessary features to stable applications.
Prerequisites
  • Basic understanding of software vulnerabilities and user interfaces
  • Familiarity with markdown and its applications in text editors
Key Definitions
Markdown
A lightweight markup language used to format plain text.
Feature Bloat
The addition of excessive features to a software product that can lead to increased complexity and vulnerabilities.
Mentioned Resources
Threat Locker(product)

Presented as a solution for endpoint protection to prevent unauthorized access through vulnerabilities.

Content Analysis
Type

tutorial

Sentiment

mixed

Difficulty

intermediate

Complexity

moderate

Target Audience

Tech enthusiasts, software developers, cybersecurity professionals, and general users interested in software vulnerabilities.

#windows11#notepad#markdown#softwaresecurity#endpointprotection#threatlocker#featurebloat