WinRAR flaw lets hackers run programs when you open RAR archives

TheOneWithTheHair@lemmy.world to Technology@lemmy.world – 632 points –
bleepingcomputer.com
105

You are viewing a single comment

Somehow Windows has always been and is still crap at managing archives. Ultra-slow, has trouble opening or extracting individual files inside the archive, etc.

However, 7-zip has been doing all that perfectly forever now. Not sure why anyone would use WinRAR, paid for or not.

Even 7Zip now though is insecure and outdated. Use NanaZip if you’re on windows, it's a fork that is more secure and uses modern compression/encryption algorithms in addition to integrating better with current Windows APIs

https://github.com/M2Team/NanaZip

Yeah maybe isn't great but I admit that be able to use the open file window from a program and select a file inside a compressed file is nice.

WinRAR is an internet institution at this point. It’s like Amtrak, why would anyone ride the train when there are better cheaper and faster modes of transport? Don’t know but people do anyway

What? Amtrak is great for specific use cases. For intrastate travel in the US, Amtrak often is the fastest, cheapest, most comfortable experience.

Oddly, going two states over, it's often the slowest and most expensive, but for mid haul distance, Amtrak is fantastic.

That’s kind of my point that WinRAR has its limited use cases like Amtrak does although majority of the time it’s more efficient to use something else