Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
翠星石 (suiseiseki@freesoftwareextremist.com)'s status on Saturday, 19-Aug-2023 12:50:06 JST 翠星石
in reply to
- DarkMahesvara
@DarkMahesvara >use proprietary archive extracting software
>wonder why you can get cracked

Install gnuzip and use .gzip or install 7zip and use .7z

In conversation about a year ago from freesoftwareextremist.com permalink
- Embed this notice
  DarkMahesvara (darkmahesvara@varishangout.net)'s status on Saturday, 19-Aug-2023 12:50:07 JST DarkMahesvara
  
  "The flaw is tracked as CVE-2023-40477 and could give remote attackers arbitrary code execution on the target system after a specially crafted RAR file is opened."
  
  https://www.bleepingcomputer.com/news/security/winrar-flaw-lets-hackers-run-programs-when-you-open-rar-archives/
  
  exploits in archive, image and video files/tools are rare but its still a good idea to only use them inside of a sandbox like flatpak/bubblewrap or firejail to minimize the risk.
  In conversation about a year ago permalink
  Attachments
  1. Domain not in remote thumbnail source whitelist: www.bleepstatic.com
    
    WinRAR flaw lets hackers run programs when you open RAR archives
    
    from @BleepinComputer
    
    A high-severity vulnerability has been fixed in WinRAR, the popular file archiver utility for Windows used by millions, that can execute commands on a computer simply by opening an archive.

Feeds