Re: unzip and password protected archive

[Steven Bellovin <smb%cs.columbia.edu@localhost>]

On Mar 6, 2010, at 7:35 PM, thomas nivelet wrote:

> 2010/3/7 Joerg Sonnenberger <joerg%britannica.bec.de@localhost>:
>> Password protected archives are actually used? Yes, the in-tree version
>> doesn't handle them. I haven't seen them used for anything but
>> obfuscation, so personally I never looked at whether it can be supported
>> without violating the streaming requirement or not.
>> 
>> Joerg
>> 
> 
> In fact I don't think they are, but 15 years ago they were and I was a
> stupid teenager full of arrogance and paranoia who locked all his code
> with the fear that the whole world will steal it...
> 
Password-protected zip files were heavily used by some worms a few years ago, 
as a way of evading anti-virus scanners.  "Here's the document; enter this 
password to read it"....