Packing files into archives like zips, tars, jars, wars, cpios, apks, rars and 7zs is a common way to keep important files and filesystem structures together when sharing them; it's also a source of potentially dangerous malware attacks.
In a new paper the security research organization Snyk details an attack they call Zip Slip, which exploits a bug in thousands of archiving and de-archiving utilities, including ones from HP, Amazon, Apache and Pivotal.
Zip Slip is a "directory traversal" attack, which exploits lax checking during unpacking, allowing the attacker to craft an archive that drops files in arbitrary directories anywhere on your hard drive, even overwriting key components.
Zip Slip Vulnerability [Snyk]
Nathan Davis writes, "When you shuffle a deck, it rearranges the order of the cards and I got wondering what that looked like.
40 years of Reaganomic sociopathy has managed to convince hundreds of millions of otherwise sensible people that big, social problems are caused by their personal choices, and not (say) by rapacious corporations that corrupt the regulatory process in order to get away with literal and figurative murder. The Intercept's Sharon Lerner made a short doc […]
Mike Lake's mashup of Lizzo's "Truth Hurts" with "Scales and Arpeggios" from Disney's 1970 animated feature "The Aristocats" is plain fabulous. Lizzo plays the scene far better than Eva Gabor ever did. (via Kottke)
We have a theory about those throw blankets that are barely big enough to cover your legs. The only people who seem to make them or use them are grandmothers, and the blankets are only that small because Nana got bored halfway through the sewing job. Look, we’re sure she means well. But if you […]
Remember when the default state of your online presence was anonymity? That’s not so clear-cut anymore, and the worst part is you may not even know who is using your data or what they’re using it for. Small wonder that so many people are choosing to surf through virtual private networks. VPNs filter web access […]
Get ready for the stream of your dreams, binge-watchers. There’s a contest afoot, and at stake is a lifetime subscription to Netflix. All you have to do is sign up, and you’re entered to win this ultimate Netflix plan. When does it expire? Only when you do. And hey, just in case you need something […]