News for hackers. Stuff that matters.

A comment on Man who thought opening a TXT file is fine thought wrong. Parent comment

Re:Man who thought opening a TXT file is fine thought wrong by TazeTSchnitzel on Saturday April 03, 2021 @07:58AM (#26680322)
That is Safari's default behaviour for ZIP files. Only to extract them, though.
[ Parent | on HN ]
Re:Man who thought opening a TXT file is fine thought wrong by sammax on Saturday April 03, 2021 @09:22AM (#26680825)
So whenever the program used for extracting ZIPs has a vulnerability any website could force-download a malicious ZIP and it would automatically be extracted and trigger the vulnerability...

Why is "force-download" even a thing? IMO the browser should always ask before downloading any file. Though this is not a unique Mac thing, I believe Chrome does that everywhere.

[ Parent | on HN ]
Re:Man who thought opening a TXT file is fine thought wrong by dividuum on Saturday April 03, 2021 @11:35AM (#26681859)
What happens with 42.zip and other zip bombs? https://www.bamsoftware.com/hacks/zipbomb/
[ Parent | on HN ]
Re:Man who thought opening a TXT file is fine thought wrong by kergonath on Saturday April 03, 2021 @08:45AM (#26680614)
Still a terrible idea, though.
[ Parent | on HN ]