Communick News
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
TheOneWithTheHair@lemmy.world to Technology@lemmy.worldEnglish · 2 years ago

WinRAR flaw lets hackers run programs when you open RAR archives

www.bleepingcomputer.com

external-link
message-square
59
link
fedilink
566
external-link

WinRAR flaw lets hackers run programs when you open RAR archives

www.bleepingcomputer.com

TheOneWithTheHair@lemmy.world to Technology@lemmy.worldEnglish · 2 years ago
message-square
59
link
fedilink
alert-triangle
You must log in or register to comment.
  • db2@sopuli.xyz
    link
    fedilink
    English
    arrow-up
    243
    arrow-down
    1
    ·
    2 years ago

    Well now I’m definitely not buying it.

    • sock@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      2 years ago

      does it still let you infinitely have a free trial??

      • db2@sopuli.xyz
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        2
        ·
        2 years ago

        Just blow the dust off that copy of serials2k 🤣

    • sknowmads@dormi.zone
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      8
      ·
      2 years ago

      You deserve the updoot sir

  • wAkawAka@lemmy.world
    link
    fedilink
    English
    arrow-up
    69
    arrow-down
    2
    ·
    2 years ago

    “Embrace tar.gz 7zip, son!”

    • sebinspace@lemmy.world
      link
      fedilink
      English
      arrow-up
      28
      arrow-down
      2
      ·
      2 years ago

      Why is there rarely a mention of 7zip?

      • willya@lemmyf.uk
        link
        fedilink
        English
        arrow-up
        18
        arrow-down
        1
        ·
        2 years ago

        I feel like I’ve seen it mentioned like 50 times in the past two weeks here on Lemmy.

    • Echedelle (she/her)@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 years ago

      PeaZip I would suggest better.

  • NothingSpecial@lemmy.world
    link
    fedilink
    English
    arrow-up
    66
    ·
    2 years ago

    Just use 7-Zip

  • Wats0ns@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    67
    arrow-down
    1
    ·
    2 years ago

    Well at least someone’s gonna make money from WinRAR users

  • 790@lemmy.sdf.org
    link
    fedilink
    English
    arrow-up
    44
    arrow-down
    1
    ·
    2 years ago

    Interesting. About a month ago I joined the elite club of WinRAR licence owners.

    • stephen01king@lemmy.zip
      link
      fedilink
      English
      arrow-up
      12
      ·
      2 years ago

      These hackers must be targeting you, then.

    • andrew@lemmy.stuart.fun
      link
      fedilink
      English
      arrow-up
      6
      ·
      2 years ago

      One of three

    • Treczoks@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 years ago

      Mine is a few years older.

  • Octopus@thelemmy.club
    link
    fedilink
    English
    arrow-up
    41
    ·
    2 years ago

    Well, good that Windows now has native RAR support.

    • brsrklf@compuverse.uk
      link
      fedilink
      English
      arrow-up
      52
      arrow-down
      2
      ·
      2 years ago

      Somehow Windows has always been and is still crap at managing archives. Ultra-slow, has trouble opening or extracting individual files inside the archive, etc.

      However, 7-zip has been doing all that perfectly forever now. Not sure why anyone would use WinRAR, paid for or not.

      • XTornado@lemmy.ml
        link
        fedilink
        English
        arrow-up
        3
        ·
        2 years ago

        Yeah maybe isn’t great but I admit that be able to use the open file window from a program and select a file inside a compressed file is nice.

      • TORFdot0@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        1
        ·
        2 years ago

        WinRAR is an internet institution at this point. It’s like Amtrak, why would anyone ride the train when there are better cheaper and faster modes of transport? Don’t know but people do anyway

        • LastYearsPumpkin@feddit.ch
          link
          fedilink
          English
          arrow-up
          12
          arrow-down
          1
          ·
          edit-2
          2 years ago

          What? Amtrak is great for specific use cases. For intrastate travel in the US, Amtrak often is the fastest, cheapest, most comfortable experience.

          Oddly, going two states over, it’s often the slowest and most expensive, but for mid haul distance, Amtrak is fantastic.

          • TORFdot0@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            2 years ago

            That’s kind of my point that WinRAR has its limited use cases like Amtrak does although majority of the time it’s more efficient to use something else

    • Jiří Král@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 years ago

      *Only for opening rar files. Not creating them.

  • nutsack@lemmy.world
    link
    fedilink
    English
    arrow-up
    41
    arrow-down
    9
    ·
    edit-2
    2 years ago

    the only reason anyone still uses this shit is ignorance

    • HeneryHawk@thelemmy.club
      link
      fedilink
      English
      arrow-up
      7
      arrow-down
      1
      ·
      2 years ago

      On a very very rare occasion I’ve had to use it for scene cracks as other apps didn’t work. They use WinRAR to archive it so on those very rare occasions it’s the only thing that unpacks it

      • justastranger@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        5
        ·
        2 years ago

        WinRAR also lets you delete files from a RAR archive, 7zip does not.

    • nicolairathjen@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      2
      ·
      2 years ago

      For me it’s laziness.

    • ReluctantMuskrat@lemmy.world
      cake
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 years ago

      I bought a lifetime license literally more than 20 years ago to support the developer. I use 7Zip for most stuff but prefer WinRAR for split rar archive support.

    • severien@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      2
      ·
      2 years ago

      That’s, quite ironically, a pretty ignorant opinion. There are areas where WinRAR is stronger than 7zip.

      • kattenluik@feddit.nl
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 years ago

        The person you replied to never mentioned 7-Zip, and there’s forks and other programs that are probably just as strong in the same areas.

        • severien@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          1
          ·
          2 years ago

          “probably”

          The commenter implied that there’s a tool which is better than WinRAR in everything and therefore there can’t possibly be a reason to use WinRAR. Which application is it then?

          • kattenluik@feddit.nl
            link
            fedilink
            English
            arrow-up
            1
            ·
            2 years ago

            I’d need to know the areas you consider 7-Zip to be stronger in first, because I can’t think of anything myself.

            • severien@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              2 years ago

              As an example, RAR provides parity records which allows recovery of large amounts of compressed data in case of data corruption. 7zip can lose all its content if one bit is flipped.

              RAR provides much more support for underlying file system support which makes it more suitable as an archival tool. Things like NTFS hard links, streams, ACLs, all three timestamps. 7zip doesn’t support that.

              WinRAR in general has way more niche features for advanced use cases, while 7zip focuses on the basics.

      • nutsack@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 years ago

        deleted by creator

  • d3Xt3r@lemmy.nz
    link
    fedilink
    English
    arrow-up
    38
    arrow-down
    7
    ·
    2 years ago

    However, from a practical perspective, deceiving users into performing the required action shouldn’t be overly challenging, and given the vast size of WinRAR’s user base

    Excuse me, but “vast” size of WinRAR’s user base? I didn’t know WinRAR even had any users left.

    • zewm@lemmy.zip
      link
      fedilink
      English
      arrow-up
      10
      arrow-down
      1
      ·
      2 years ago

      There is that one last user

      https://youtu.be/lX_pF03vCSU

      • PipedLinkBot@feddit.rocksB
        link
        fedilink
        English
        arrow-up
        7
        arrow-down
        1
        ·
        2 years ago

        Here is an alternative Piped link(s): https://piped.video/lX_pF03vCSU

        Piped is a privacy-respecting open-source alternative frontend to YouTube.

        I’m open-source, check me out at GitHub.

    • Mr. w00t@lemy.lol
      link
      fedilink
      English
      arrow-up
      8
      ·
      2 years ago

      Well, even FAR manager which they’ve open-souced long time ago is still maintained 😀 Good thing they didn’t discover this bug in 2000s!

      • d3Xt3r@lemmy.nz
        link
        fedilink
        English
        arrow-up
        7
        ·
        2 years ago

        That looks quite interesting, seems like they’ve even got quite an extensive list of plugins - looks like may be even better than Midnight Commander. :o

      • Scrof@sopuli.xyz
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        1
        ·
        2 years ago

        I’m still using sweet FAR Manager, absolute baller of a software.

    • Kecessa@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 years ago

      Still use it out of habit!

  • terminhell@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    22
    ·
    2 years ago

    It’s what we get for not buying it XD

  • Potatos_are_not_friends@lemmy.world
    link
    fedilink
    English
    arrow-up
    10
    ·
    2 years ago

    It’s been like at least 5 years since I’ve seen a rar file.

  • FarLine99@lemm.ee
    link
    fedilink
    English
    arrow-up
    12
    arrow-down
    3
    ·
    2 years ago

    PeaZip is GOAT software. Truly amazing.

    • I need NOS@lemm.ee
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 years ago

      How does it compare to 7-Zip?

      • Echedelle (she/her)@lemmy.blahaj.zone
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 years ago

        They are basically a vitamined frontend + custom backend for 7zip-zstd supporting several other formats such as lzip.

        • I need NOS@lemm.ee
          link
          fedilink
          English
          arrow-up
          2
          ·
          2 years ago

          Thanks! I’ve been happy with 7-Zip for Windows, but what you’re describing sound like an upgrade with few downsides, if any. I’ll try it next time I get the chance!

          • Echedelle (she/her)@lemmy.blahaj.zone
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            1
            ·
            2 years ago

            Another pro is that PeaZip is multi platform and could be used in MacOS and GNU/Linux.

            • shotgun_crab@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              2 years ago

              7-Zip is multi platform too

              • Tick_Dracy@lemmy.worldBanned
                link
                fedilink
                English
                arrow-up
                2
                ·
                edit-2
                2 years ago

                Removed by mod

                • Echedelle (she/her)@lemmy.blahaj.zone
                  link
                  fedilink
                  English
                  arrow-up
                  2
                  ·
                  2 years ago

                  That version is not official. Was a rework made by an external user.

                  I remember the main author was trying to rework their custom version but yes, no GUI.

      • Tick_Dracy@lemmy.worldBanned
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        2 years ago

        Removed by mod

      • FarLine99@lemm.ee
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        1
        ·
        2 years ago

        It support zip, rar, 7z. Basically all archive formats. It has way better UI. It is open source. It is free in beer.

        • AProfessional@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          ·
          2 years ago

          It is open source. It is free in beer.

          It is free as in speech. Your phrase refers to proprietary yet no cost software.

          • FarLine99@lemm.ee
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            4
            ·
            2 years ago

            Free as in freedom is not a big argument for most people. But as in beer 😏

    • _Hadek@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      4
      ·
      2 years ago

      This!

      I used winrar at first, but never truly trusted 7zip. Didn’t like the way it looked. Then first time I learned about ninite, I saw peazip and never looked back.

      With the soon to be supported .rar on windows 11 I might do away with it but I feel peazip works faster.

      • slaintrax@lemmy.myserv.one
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 years ago

        The built in zip support in windows is super slow. I wonder if they will improve it when rar support comes.

      • Echedelle (she/her)@lemmy.blahaj.zone
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 years ago

        Use PeaZip

  • CoolSouthpaw@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    ·
    2 years ago

    Welp. Good thing I never bought it haha.

  • ryannathans@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 years ago

    Zstd go brrr

  • Maharashtra@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    27
    ·
    2 years ago

    using WinRAR

    And that’s how I know that voting should be a privilege, not a right.

    • stevedidWHAT@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      2 years ago

      You’re so dramatic

      • Maharashtra@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        5
        ·
        2 years ago

        Truth is dramatic.

        • stevedidWHAT@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 years ago

          Prolific man, so true

Technology@lemmy.world

technology@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@lemmy.world

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


  • @L4s@lemmy.world
  • @autotldr@lemmings.world
  • @PipedLinkBot@feddit.rocks
  • @wikibot@lemmy.world
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 3.17K users / day
  • 8.69K users / week
  • 18.1K users / month
  • 38.9K users / 6 months
  • 6 local subscribers
  • 72.4K subscribers
  • 14.7K Posts
  • 583K Comments
  • Modlog
  • mods:
  • L3s@lemmy.world
  • enu@lemmy.world
  • Technopagan@lemmy.world
  • L4sBot@lemmy.world
  • L3s@hackingne.ws
  • L4s@hackingne.ws
  • BE: 0.19.11
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org