• 0 Posts
  • 5 Comments
Joined 1 year ago
cake
Cake day: July 30th, 2023

help-circle




  • As an IT Engineer this concept frankly terrified me and feels like your opening yourself up to a potential zero click attack - such as https://threatpost.com/apple-mail-zero-click-security-vulnerability/165238/

    So my initial answer is an emphatic “please do not the ZIP”. It could be as mundane as a ZIP bomb, or it could explain a vulnerability in the operating system or automatic extraction program. Having a human required to open the ZIP prior to its expansion reduces its attack surface area somewhat (but not eliminates it) because it allows the human to go “huh this ZIP looks funny” if something is off, rather than just dispatching an automated task.

    With that out of the way - what’s your use case with this? There has to be a specific reason your interested in saving a few clips here on one highly specific archive format, but not others like the tar unix archive, 7z, or RAR.