WinRAR has a major security bug, and you have to install its fix manually
www.windowscentral.com
external-link
Attackers can utilize a bug to execute code on your PC when you open zipped files.

TLDR Some folks just never update their software. Idk if this is just a Windows problem but damn. I remember reading about this 0-day months ago and thinking to myself malware groups will have a field day before the vulnerability finally becomes dead just because of this.

Again? Is it the same one with 7zip?

Is it that you can keep using the free trial forever? /s

AutoTL;DR
bot account
link
fedilink
English
231Y

This is the best summary I could come up with:


The issue was discovered by Google’s Threat Analysis Group (TAG), which discussed the problem in depth in a blog post.

The issue allows an attacker to execute arbitrary code when someone opens a zipped file.

"Cybercrime groups began exploiting the vulnerability in early 2023, when the bug was still unknown to defenders.

“TAG has observed government-backed actors from a number of countries exploiting the WinRAR vulnerability as part of their operations.”

While WinRAR is a useful piece of software used by over half a billion people, it is perhaps more famous as a meme or as the butt of jokes.

When Microsoft announced native support for the .rar file format, WinRAR shared a meme on Twitter (now called X).


The original article contains 333 words, the summary contains 119 words. Saved 64%. I’m a bot and I’m open source!

Nine
link
fedilink
41Y

Good bot!

katy ✨
link
fedilink
491Y

yeah it’s called winrar

P03 Locke
link
fedilink
English
121Y

Switch to 7-Zip now!

katy ✨
link
fedilink
41Y

scoop install 7zip.

everytime.

Peazip is also a very good alternative.

Maybe because of the fact that they can’t pay their staff, because nobody pays to use their product.

Congratulations, you’re dumb as fuck!

@[email protected]
link
fedilink
-6
edit-2
1Y

I paid for it 🤷 that’s how devs can afford to keep working on their open source projects in the long run.

Wrong wording due to posting early in the morning, meant any independent work…

Winrar is… Not open source. Where did you get that from?

@[email protected]
link
fedilink
5
edit-2
1Y

Early in the morning post, worded that wrong, but the sentiment is the same, open source or independent projects, the creators need something in return to keep working on them

That’s fair enough!

I paid for it too. I mean fuck man. I’ve been using winrar for almost 30 years. That’s more than I can say for most things in my life. I figured it was the least I could do.

@[email protected]
link
fedilink
English
81Y

Same I bought the physical disk too, not like I have a disk drive. But now I have a licensed winrar disk

SokathHisEyesOpen
link
fedilink
English
5
edit-2
1Y

You guys are all Eugene Roshal alts. Aren’t you? Nice try Eugene!

Edit: in reality I think Eugene is a badass who has done something really special in a world overflowing with greed.

MrScottyTay
link
fedilink
English
101Y

I’ve paid for winrar because I decided I’ve used it for the better half of my life and well kindly keep using it and getting rid of that pop up whilst also giving back to soldering i use regularly was the right choice for me.

Nine
link
fedilink
121Y

Likewise! Once I finally started making real money I tried to buy software I pirated early on. Even if I don’t currently use it.

Same, although I do use it out of habit mostly.

dinckel
link
fedilink
461Y

Except it’s been developed and maintained by one guy, for the past 30 years

Winrar dev gigachad ngl

Besides, the real money is from companies that pay for the licenses. Not individuals.

Create a post

This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.


Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.


Rules:

1: All Lemmy rules apply

2: Do not post low effort posts

3: NEVER post naziped*gore stuff

4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.

5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)

6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist

7: crypto related posts, unless essential, are disallowed

  • 1 user online
  • 40 users / day
  • 147 users / week
  • 307 users / month
  • 2.32K users / 6 months
  • 1 subscriber
  • 3.01K Posts
  • 43.4K Comments
  • Modlog