News for hackers. Stuff that matters.
Re:Multiple 7-Zip Vulnerabilities Discovered by infogulch on Thursday May 12, 2016 @02:28PM (#11685641)
7-Zip is the VLC of file containers.
Re:Multiple 7-Zip Vulnerabilities Discovered by giancarlostoro on Thursday May 12, 2016 @02:41PM (#11685735)
It is my default whenever I'm on Windows. Everyone loves to close the "trial" window on software when there's usually a better open source alternative. The hidden gem in 7-Zip is you can set file association, it's just not enabled by default which makes it seem more complicated to newcomers than it really is.
Re:Multiple 7-Zip Vulnerabilities Discovered by arkitaip on Thursday May 12, 2016 @02:51PM (#11685801)
Not really sure why you would need regular releases for handing zip files, though.
Re:Multiple 7-Zip Vulnerabilities Discovered by valarauca1 on Thursday May 12, 2016 @03:46PM (#11686184)
Windows handles zip files horribly.

The time to extract a 100MB zip in windows explorer is 4-6minutes (if not more). Compare this to ~30seconds in 7zip.

Re:Multiple 7-Zip Vulnerabilities Discovered by dave2000 on Thursday May 12, 2016 @05:08PM (#11686803)
Windows ignores the partition you're unzipping to and writes to the c drive, then does a very slow, tedious move to the destination partition. It's obvious it should use the destination partition in the first place.
Re:Multiple 7-Zip Vulnerabilities Discovered by nwah1 on Thursday May 12, 2016 @02:45PM (#11685764)
PeaZip is like a friendly version of 7zip, and uses the 7zip code. 7zip is not very well maintained, whereas PeaZip has regular releases.
Re:Multiple 7-Zip Vulnerabilities Discovered by poizan42 on Thursday May 12, 2016 @03:04PM (#11685898)
> 7zip is not very well maintained, whereas PeaZip has regular releases.

16.00 2016-05-10

15.14 2015-12-31

15.12 2015-11-19

15.11 beta 2015-11-14

15.10 beta 2015-11-01

15.09 beta 2015-10-16

15.08 beta 2015-10-01

15.07 beta 2015-09-17

...

How is that not regular?

Re:Multiple 7-Zip Vulnerabilities Discovered by nwah1 on Thursday May 12, 2016 @03:37PM (#11686117)
Perhaps lately. Prior to this past November, the stable release advertised on their site had been stuck on the same version for years, without even any point releases. And they use SourceForge for hosting.

The code quality may be excellent, but it just seemed to me that they were not too well organized, logistically, compared to other projects.

Re:Multiple 7-Zip Vulnerabilities Discovered by TeMPOraL on Thursday May 12, 2016 @05:06PM (#11686789)
Why would they need regular releases? This is not a web startup, it's an archive compression/decompression tool. It worked perfectly well 5 years ago.
Re:Multiple 7-Zip Vulnerabilities Discovered by giancarlostoro on Thursday May 12, 2016 @06:55PM (#11687439)
I was wondering the same. Unless it involves a security being ignored for a year or more, I don't see much of an issue with a lack of updates. I rather a developer takes their time to write their code vs. speed coding and publishing new bugs left and right.
Re:Multiple 7-Zip Vulnerabilities Discovered by nwah1 on Friday May 13, 2016 @10:15AM (#11690521)
I find it unlikely that there would be no memory leaks needing patching, no important compiler updates, and no API-compatible dependency updates that should've been applied to the stable release.

The Linux Kernel, Firefox, and lots of projects have some sort of Long Term Service branch where simple uncontroversial improvements are added.

Modern best practices for releasing open source software are important, and a project that doesn't seem aware of any of them makes me concerned about their attention to detail.

Re:Multiple 7-Zip Vulnerabilities Discovered by poizan42 on Thursday May 12, 2016 @06:38PM (#11687364)
The version they consider "stable" is rarely updated. That just means they have a very high standard for when it's considered stable.

If you look through the changelog you'll see that the largest gaps between any releases was from 9.25 alpha (2011-09-16) to 9.30 alpha (2012-10-26).

Re:Multiple 7-Zip Vulnerabilities Discovered by skoczymroczny on Friday May 13, 2016 @06:33AM (#11689579)
Too bad it doesn't support unpacking .tar.gz files in a single step like their competition (WinZip) does.