[HN Gopher] 7-Zip developer releases the first official Linux ve...
       ___________________________________________________________________
        
       7-Zip developer releases the first official Linux version
        
       Author : thunderbong
       Score  : 98 points
       Date   : 2021-03-12 18:17 UTC (4 hours ago)
        
 (HTM) web link (www.bleepingcomputer.com)
 (TXT) w3m dump (www.bleepingcomputer.com)
        
       | LeoPanthera wrote:
       | A command line 7z compatible archiver has been available for
       | Linux for a long time: http://p7zip.sourceforge.net
       | 
       | If all you care about is LZMA compression lzip is your best
       | choice, which has a much more rational container than xz.
       | https://www.nongnu.org/lzip/
        
         | distantsounds wrote:
         | please RTFA before commenting, it goes into detail as to why
         | one might not want to use p7zip
        
         | zanellato19 wrote:
         | It literally mentions p7zip on the article and talks about why
         | that isnt a good choice.
        
       | lumpa wrote:
       | Previously (link to upstream announcement):
       | https://news.ycombinator.com/item?id=26426816
       | 
       | No simultaneous source release, a call for users to run Linux
       | benchmarks, and a mysterious tweet about 7Zip source code
       | quality.
        
         | hannob wrote:
         | It isn't that mysterious.
         | 
         | p7zip has a number of known bugs easily found by fuzzing, as it
         | hasn't seen updates for years. 7-zip in general is a tool that
         | is written in C and supports lots of complex binary formats and
         | thus has a huge attack surface for memory corruption bugs.
         | 
         | This is all pretty obvious with some basic knowledge of how
         | these things work.
        
           | lumpa wrote:
           | Thanks for clarifying, the original tweet has also been
           | expanded innl the same vein: https://mobile.twitter.com/AdmVo
           | nSchneider/status/1369300173...
           | 
           | And a bit off-topic, but have you heard of (or maybe
           | commented on) "Bring macOS Quick Look Feature to Windows"[0]
           | aka "parse and preview everything"? Is it paranoia[1] to
           | think "how we defend against parser exploits" should be part
           | of the tool design?
           | 
           | [0] https://github.com/QL-Win/QuickLook
           | 
           | [1] https://news.ycombinator.com/item?id=26007577
        
       ___________________________________________________________________
       (page generated 2021-03-12 23:01 UTC)