Man who thought opening a TXT file is fine thought wrong

Re:Man who thought opening a TXT file is fine thought wrong by sammax on Saturday April 03, 2021 @06:12AM (#26679750)

> I found another browser trick that lets force-downloaded TXT files to be opened without user interaction or warning

I wish there was more elaboration on this. Opening a downloaded file without user interaction sounds pretty bad.

[ Parent | on HN ]

Re:Man who thought opening a TXT file is fine thought wrong by TazeTSchnitzel on Saturday April 03, 2021 @07:58AM (#26680322)

That is Safari's default behaviour for ZIP files. Only to extract them, though.

[ Parent | on HN ]

Re:Man who thought opening a TXT file is fine thought wrong by sammax on Saturday April 03, 2021 @09:22AM (#26680825)

So whenever the program used for extracting ZIPs has a vulnerability any website could force-download a malicious ZIP and it would automatically be extracted and trigger the vulnerability...

Why is "force-download" even a thing? IMO the browser should always ask before downloading any file. Though this is not a unique Mac thing, I believe Chrome does that everywhere.

[ Parent | on HN ]

Re:Man who thought opening a TXT file is fine thought wrong by dividuum on Saturday April 03, 2021 @11:35AM (#26681859)

What happens with 42.zip and other zip bombs? https://www.bamsoftware.com/hacks/zipbomb/

[ Parent | on HN ]

Re:Man who thought opening a TXT file is fine thought wrong by kergonath on Saturday April 03, 2021 @08:45AM (#26680614)

Still a terrible idea, though.

[ Parent | on HN ]