642

WinRAR flaw lets hackers run programs when you open RAR archives(www.bleepingcomputer.com)

posted
by
Avatar
TheOneWithTheHair@lemmy.world
in
Avatar
technology@lemmy.world
106 comments
hidereport
Sort:
HotTopControversialNewOld
You are viewing a single thread.
View all comments
Avatar
d3Xt3r@lemmy.nz
36 points

However, from a practical perspective, deceiving users into performing the required action shouldn’t be overly challenging, and given the vast size of WinRAR’s user base

Excuse me, but “vast” size of WinRAR’s user base? I didn’t know WinRAR even had any users left.

permalink
report
reply
Avatar
kuneho@lemmy.world
27 points

9 out of 10 people I know use WinRAR. It’s amongst the very firsr software they install at fresh start.

I myself also just changed to 7-Zip around… I don’t know, a year ago?

permalink
report
parent
reply
Avatar
d3Xt3r@lemmy.nz
14 points

Which part of the world is this, if you don’t mind me asking? (just genuinely curious, cause I haven’t come across any WinRARs in the wild here in NZ, most folks I know use either 7-Zip or PeaZip).

permalink
report
parent
reply
Avatar
KnightontheSun@lemmy.world
6 points

Am in the US and used winrar for a long time as it was integrated into Usenet binaries as rar files. It was embedded with some other software.

permalink
report
parent
reply
Show more comments
Avatar
kuneho@lemmy.world
6 points

I’m from Europe, in the embrace of the Carpathian Mountains :)

before WinRAR, people used WinZIP here in the '00s (at least Windows folks). Again, a strange choice, I know.

permalink
report
parent
reply
Avatar
zewm@lemmy.zip
10 points

There is that one last user

https://youtu.be/lX_pF03vCSU

permalink
report
parent
reply
Avatar
PipedLinkBot@feddit.rocksB
8 points

Here is an alternative Piped link(s): https://piped.video/lX_pF03vCSU

Piped is a privacy-respecting open-source alternative frontend to YouTube.

I’m open-source, check me out at GitHub.

permalink
report
parent
reply
Avatar
Mr. w00t@lemy.lol
9 points

Well, even FAR manager which they’ve open-souced long time ago is still maintained 😀 Good thing they didn’t discover this bug in 2000s!

permalink
report
parent
reply
Avatar
d3Xt3r@lemmy.nz
8 points

That looks quite interesting, seems like they’ve even got quite an extensive list of plugins - looks like may be even better than Midnight Commander. :o

permalink
report
parent
reply
Avatar
kuneho@lemmy.world
1 point
*

Ah, FAR manager.

I used it last time around… 15 years ago to apply VKP patches on my Sony Ericsson phones :P like making my K750i into a ‘W750i’ with W800i software, adding GFX and Acoustic patches…

permalink
report
parent
reply
Avatar
Scrof@sopuli.xyz
0 points

I’m still using sweet FAR Manager, absolute baller of a software.

permalink
report
parent
reply
Avatar
Kecessa@sh.itjust.works
2 points

Still use it out of habit!

permalink
report
parent
reply

Technology

!technology@lemmy.world

Create post

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

Community stats

  • 18K

    Monthly active users

  • 12K

    Posts

  • 543K

    Comments

Community moderators