4 ms·
The whole thing gives off a smell of cargo cult security. E.g. "7-Zip doesn't have anti exploit support". Dug in to the source for that claim - it's a forum po
by scrlk 4y ago
The whole thing gives off a smell of cargo cult security.
E.g. "7-Zip doesn't have anti exploit support". Dug in to the source for that claim - it's a forum post of someone running Windows XP in 2020 (!) with an ancient version of Malwarebytes.
- dwattttt 4y agoIt's still true today; the current version of 7zip doesn't support Control Flow Guard (validated on Win11), and there's lots of security features that come _after_ supporting that.
- scrlk 4y agoI'm not a Windows developer, so this might be a stupid question: is simply a case of just building 7-Zip from source and enabling the Control Flow Guard flag in Visual Studio, or does it require more work?
- dwattttt 4y agoIt shouldn't take much more than that, unless you're not using Visual Studio in the first place.
- blibble 4y agopreviously it was a deliberate decision by the developer to turn these features off, as they hurt his benchmark scores
- josephcsible 4y agoCan you link to a source for this?
- blibble 4y agoI misremembered, it was binary size (even more stupid) https://landave.io/2018/01/7-zip-multiple-memory-corruptions-via-rar-and-zip/ https://landave.io/2018/01/7-zip-multiple-memory-corruptions...