A fuzzy issue of responsible disclosure [LWN.net]

A fuzzy issue of responsible disclosure

Posted Aug 13, 2022 7:30 UTC (Sat) by Sesse (subscriber, #53779)
In reply to: A fuzzy issue of responsible disclosure by developer122
Parent article: A fuzzy issue of responsible disclosure

Neither tar nor zip are deliberately designed with this in mind. Both are from way before the IT industry started worrying much about security.

to post comments

Posted Aug 13, 2022 16:43 UTC (Sat) by developer122 (guest, #152928) [Link] (1 responses)

Thus why I asked. They're a common target so their implementations tend to be security minded, but the filesystems themselves are definitely not.

Posted Aug 13, 2022 18:09 UTC (Sat) by Sesse (subscriber, #53779) [Link]

Are you now talking about the formats tar and zip, or the implementations GNU tar and Info-ZIP?