News for hackers. Stuff that matters.

A comment on 7-Zip: Multiple Memory Corruptions via RAR and ZIP. Parent comment

Re:7-Zip: Multiple Memory Corruptions via RAR and ZIP by vocatus_gate on Wednesday January 24, 2018 @02:08PM (#16225389)
Oh wow, I always assumed he just defaulted to HTTP version of the site, but HTTPS was an option. But nope, there isn't even a version of the site served over HTTPS. In the year 2018.
[ Parent | on HN ]
Re:7-Zip: Multiple Memory Corruptions via RAR and ZIP by Ajedi32 on Wednesday January 24, 2018 @04:20PM (#16226433)
Yeah, that's pretty terrible. Seems like the only secure way to get a copy of 7-zip is to install it via Chocolatey or Sourceforge.
[ Parent | on HN ]
Re:7-Zip: Multiple Memory Corruptions via RAR and ZIP by dogma1138 on Wednesday January 24, 2018 @06:55PM (#16227489)
Since they get theirs from an insecure source it really isnt.
[ Parent | on HN ]
Re:7-Zip: Multiple Memory Corruptions via RAR and ZIP by icebraining on Thursday January 25, 2018 @05:25AM (#16229976)
No, you can get them from the official Sourceforge project over HTTPS: https://sourceforge.net/projects/sevenzip/
[ Parent | on HN ]