

No, I didn’t.
This is akin to calling the police for the murder of your spouse BEFORE you commit the murder. There’s literally no good reason not to wait until after.
Please, name me a logical reason why, before you commit the act, during the planning stage, or even when you are moments from planning to execute the plan, you would call someone entirely unrelated to prepare a document about what you are going to do, instead of calling them AFTER.











Yeah I get your thought process, but the second vulnerability is actually just how Windows is designed to work. When Notepad follows a link, it isn’t opening a web page, it’s passing a command directly to the OS shell.
Because Notepad is a trusted native application, it bypasses many of the security checks that a browser has.
If the link uses the file:// protocol to point to an .exe on a remote server, or ms-appinstaller to trigger an install, the OS treats that as a direct instruction to launch that software, so it can trigger an app installation prompt or, depending on the exploit, silently side-load malicious packages.