Path: utzoo!attcan!uunet!fernwood!apple!brutus.cs.uiuc.edu!zaphod.mps.ohio-state.edu!tut.cis.ohio-state.edu!uoft02!grx1042 From: grx1042@uoft02.utoledo.edu (Steve Snodgrass) Newsgroups: comp.sys.amiga Subject: Re: Self Extracting Archives Message-ID: <90.25fc5fd6@uoft02.utoledo.edu> Date: 13 Mar 90 07:49:58 GMT References: <55.25f441b5@uoft02.utoledo.edu> <195@sai.UUCP> <2675@leah.Albany.Edu> <79.25f87ef0@uoft02.utoledo.edu> <10102@cbmvax.commodore.com> Distribution: na Organization: SUBTEC Lines: 36 In article <10102@cbmvax.commodore.com>, andy@cbmvax.commodore.com (Andy Finkel) writes: > > The thing I don't like about self extracting archives is that it reduces > the careful person to the same level as a trusting person. > ... > Before the new code is ever executed on my system I run a couple > strings type programs on it that will pick up ASCII and simple > encryptions, and a disassembler. (I don't try to actually decrypt > ... > A self unpacking achiver removes this option. Because unless I > write special strings tools to work on the compressed format, and > a special disassembler, I've got no choice but to execute the > program. (if I went to the trouble of writing a special strings > program I might as well finish the job and write the unpacker! :-) ) > Andy, Have you considered this: given a self extracting archive, you can generally list the files it contains. Thus, you know immediately that you're just going to unpack some files, or if the archive is fake. The only current self-extracting format available on Amiga is PAK (a horrible program, I might mention) which is capable of listing contents if you have it around. I expect that Lharc self-extracting format will be available soon, also with listing capability. This, you can easily check to see what you're executing is really an archive. BTW: I'm honored to have this debate with someone of Commodore fame. I guess the novelty of Usenet still hasn't worn off for me! /\=======================================================================/\ \/ Reality: Steve Snodgrass |"Volts embodied intent, and Amps were the \/ /\ -^-^- Cyberspace -^-^- | runners who carried out those intentions, /\ \/ GRX1042@uoft02.utoledo.edu| against the Ohms." -Gregory Benford, ToL \/ /\ GRX1042@uoft02.BITNET | Sleep is a luxury, spare time a myth. -me /\ \/ uoft02::GRX1042 (DECnet) | Recumbent Amigas - the only way to hack. \/