460
Russia and China-backed hackers are exploiting WinRAR zero-day bug
(techcrunch.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 18 Oct 2023
460 points (98.3% liked)
Technology
59674 readers
1886 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
Blows my mind that anyone still uses WinRAR when 7zip exists.
What should blow your mind is that it's 2023 and you still need a separate program to extract compressed files on windows. 😂 Good thing they're adding native support for it in windows 11. FINALLY.
Windows has had native unzip support since Microsoft Plus! 98 added it to Windows 98 in 1998.
https://en.wikipedia.org/wiki/Microsoft_Plus!#:~:text=ZIP%20file%20integration%20with%20Windows%20Explorer%20was%20first%20introduced%20with%20this%20version%20under%20the%20name%20of%20%22compressed%20folders%22.
Yeah, it just sucks.
Same for Macs. They technically support zipping and unzipping, they're just bad at it. It's so stupid.
How so? I’ve always found finder did a good job.
There's a maximum file size, I forget what it is. And it also can't handle zips in multiple pieces.
Finder is an abortion, there is not a single thing it does well
I don't recall anyone having Plus! back then.
I think we did.
But it was added to base Windows in XP anyway.
You do on Linux as well, it's just installed by default.
For my personal use, Linux has every single thing I need right out of the box. That's why it's my main OS.
Your chosen GNU/Linux distribution installs the applications.
Microsoft and apple are the reasons boomers have learned helplessness with tech. It helped them sell units in the 90's to imply you didn't have to ever consider anything under the hood because it all is supposed to just work like magic. you just hit the switch and let electricity do it's thing.
That's not an inherently bad thing though, same as it's not inherently bad that not everyone can repair their car, or sew up tears in their trousers.
it is bad if they don't realize how simple it is to pump their own gas. That's about the equivalent of a possibly regular task like being able to unencrypt your own files. I'd say it's important enough that you should not be relying on anyone with the potential security of your own personal data.
And often, you need two! I use both gzip and tar all the time
Same with Mac OS, it’s such a fucking no brainer and it’s not hard to impl
What could possibly go wrong.
I'm willing to bet a big part of that are all the antitrust lawsuits they got for internet explorer and windows media player back in the day and just not wanting to open that box as it comes to rarlab.
.zip support they've had for well over two decades though.
WinRAR was good in ancient times when it was the only zip program available. Even in the Windows XP era there were better things to use if you knew about them. I doubt 7zip was really that usable in the early 2000s but it eventually got good and nowadays 7zip is so good that of you aren't using it, you're doing it wrong.
Well it would blow your mind to know that many people just use whatever they know that does the job
There is a certain sense of old friend that you know by heart, I've downloaded so much things where the last step was to pass it by WinRAR, but yeah I should change when there are proofs like that
FUCK WINRAR!
it's so stupid and amazing this recent celebration of people that are proud to have paid for it.
It was never a good solution really..
It just worked for what it was for a time... Because it was better than WinZip or pkzip.
7-zip has been amazing for years..
Better OS support would be cool too but it's so unnecessary thanks to 7zip.
People on Lemmy sometimes get really angry at the dumbest things.
You don't like Winrar, that's your right, chill dude.
WinRAR was great for the time and their policies on paying for the program were extremely generous. Time just overtook it.
7z recently also had an exploit. It's not magically safer.
RAR compresses significantly faster than 7z (in relation to the compression ratio of course).
RAR has recovery records, 7z doesn't. RAR4 even had cryptographic signatures included. But RAR5 dropped that.
7z is nice, but it's not objectively better than RAR on every account.
We hate WinRAR now?
I just feel like that people who are still opening RAR files are technically savvy enough to have moved on from WinRAR
Edit: and the people who would still use it aren’t really opening archives anymore so I don’t know who this is affecting. Maybe they have corporate contracts.
Not hate but we graduate to 7zip.
Isnt the FOSS thingie all the hype around lemmy? Feel like every discussion tends to drift towards FOSS topics (ironic, I know) and if an app with proprietary modules will be hated to hell and back.
It's pretty old, there's a whole meme around it
https://www.reddit.com/r/PaidForWinRAR/
You really don’t have to share a Reddit. Just make a ss and we will understand.
WinRAR had a great gui and it integrates much better (imho) into windows than 7zip, only thing 7zip has going for it is it's free.
If we are talking command line, rar is free (inb4 Unix guys butt in)
The only thing I missed switching to 7zip was the UX. 7zip is a bit weird at first, but then you find out that it will extract lots of installers. So now you can just get the wifi driver and not the bloatware that comes along with it, and it's all good.
7zip integrates very nicely into Explorer (so you can right click a file or folder and compress straight from there). I admit the main GUI of 7zip looks ancient but I never needed it.
If you're on Windows (I know I know, switch to Linux) I prefer NanaZip over base 7zip
https://github.com/M2Team/NanaZip
doesn't WinRAR do certain things that 7zip doesn't?
I can't think of what 7zip lacks, but I know it does lack some features
The reason WinRAR was useful to me allllllll those years ago was for one thing and one thing only: You could split an archive into chunks. So mostly I found that it was good for getting my warez in 1.44MB chunks.
Anon: hey Krudler, do you have a cracked copy of GTA3
Krudler: say no more, friend
Sends 350 floppy disks with the cracked game
Afaik, the only thing 7Zip lacks in comparison to WinRAR is the ability to create rar files, and that's only because the format is proprietary.
Why not? I prefer it over 7-Zip because it has built-in parity both in the archive itself and as separate files. You can achieve the latter with 7-Zip using PAR, but it's just more convenient to have it built-in for both parity creation and recovery.
I also feel like it's consuming a lot less RAM while compressing at similar speeds and achieving similar, if not sometimes better (RAR5), results.
Just because it had a zero-day bug that has already been fixed doesn't mean it's bad software. I wouldn't be surprised if zero-days came to light in other archival software. 7-Zip isn't magically immune to this.
I don't get why someone would prefer rar over zip and 7z.
Even tar.gz and all their flavors are more common.
Yeah, well technically .cab is more common than tar.gz but that doesn't mean I'd start using it.
I personally use RAR because I think it's a better format than ZIP, but I use ZIP when I have to share the archive with anyone.
How does it compare to 7z (the file format) though?
WinRAR also has clever password and encryption features. (Set short master password, quickly encrypt/decrypt any saved very long passwords.) Integration is great. Updates are regular. I only wish the UI would be updated a bit (more than just icon packs, dark mode).
There's the occasional RAR archive 7-Zip doesn't open for me, but WinRAR does. 🤷🏻