Microsoft is able to look inside your password protected zip files

submitted by Myocarditis-Man from betanews.com

all 10 comments
sorted by:
top
newinsightfulfun

[–][deleted]  (2 children)

[deleted]

    [–][deleted] 3 insightful - 1 fun3 insightful - 0 fun4 insightful - 1 fun -  (0 children)

    Need an OS, why would you use microsoft?

    For DirectX and gaming! Yeah yeah wine and proton, whatever. Window$ is still alive for now.

    [–]newguy 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (0 children)

    Compatibility is higher with certain hardware and software. That's literally the only reason left to use windows.

    [–]package 4 insightful - 1 fun4 insightful - 0 fun5 insightful - 1 fun -  (0 children)

    So a "security researcher" apparently doesn't know that all zip files on any platform store unencrypted metadata such as the filenames and file sizes of their contents, which is more than enough to trigger malware detection without ever needing to look at the actual data?

    [–]Myocarditis-Man[S] 2 insightful - 2 fun2 insightful - 1 fun3 insightful - 2 fun -  (0 children)

    "Serious questions about privacy and security"

    It's the cloud. Privacy literally does not exist.

    PS: Malware is not the only thing they are looking for. They will also be looking for hashes of anything the government and private cartels such as the movie industry do not approve of.

    [–]neolib 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (0 children)

    The password was well known in this particular case:

    Kevin Beaumont:

    change the password from infected. It has a password list it runs through files (it also extracts passwords from email bodies)

    https://cyberplace.social/@GossiTheDog/110373865106297799

    Andrew Brandt:

    The password used was "infected," which is well known in these parts.

    https://infosec.exchange/@threatresearch/110374213604768872

    [–]carn0ld03 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (0 children)

    Holy sh!t, good thing I don't have any.

    [–]STRAPONMONKEYDICK 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (2 children)

    I only use the password Bongo77 for every website that I go to and for every email account that I have

    [–]HiddenFox 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (1 child)

    Only password I use is "BigChonggas69"!

    [–]STRAPONMONKEYDICK 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (0 children)

    And now I'm going to steal all of your Bitcoins

    [–]iamonlyoneman 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (0 children)

    So are you. You can brute-force crack .zip files.