News for hackers. Stuff that matters.
Re:PeaZip: Open-source file compression and encryption software by jsheard on Saturday May 11, 2024 @09:48AM (#40328016)
I don't know if this is better, but 7zips developer has an unnerving track record when it comes to security practices. He resisted adopting basic mitigations like DEP and ASLR for a long time, only relenting after a security researcher basically begged him to after finding arbitrary code execution exploits, and he still doesn't want to use any more advanced hardening techniques because they (slightly) bloat the binary size or have a (tiny) performance overhead.

I'm all for lean software but breaking ASLR by stripping the relocation tables, just to shave a few kilobytes off an executable which is primarily intended to parse untrusted files is just reckless.

Re:PeaZip: Open-source file compression and encryption software by lobito14 on Saturday May 11, 2024 @10:24AM (#40328280)
Can you please provide the source of this thread?
Re:PeaZip: Open-source file compression and encryption software by tylerritchie on Saturday May 11, 2024 @10:39AM (#40328381)
Re:PeaZip: Open-source file compression and encryption software by lobito14 on Thursday May 23, 2024 @09:36AM (#40454555)
Thank you.
Re:PeaZip: Open-source file compression and encryption software by soraminazuki on Sunday May 12, 2024 @09:53AM (#40334488)
PeaZip appears to rely on 7zip for most of its supported formats. So Peazip isn't really an alternative if you want to avoid 7zip out of security concerns.

> 7z ... should be placed in (peazip)/res/bin/7z, to manage 7Z files and most of the other supported formats

https://peazip.github.io/peazip-sources.html

I personally like libarchive and its bsdtar CLI, which also supports a wide range of formats. I don't know if there's any popular GUI frontend for it though.

https://libarchive.org

Re:PeaZip: Open-source file compression and encryption software by jsheard on Sunday May 12, 2024 @12:45PM (#40335770)
The native archive support that was recently added to Windows itself is backed by libarchive.
Re:PeaZip: Open-source file compression and encryption software by marwis on Sunday May 12, 2024 @04:10PM (#40337219)
Doesn't streaming architecture of libarchive make it a poor choice for working with random access archives?