Live data from Hacker News

PeaZip: Open-source file compression and encryption software

peazip.github.io

41–50 of 95 posts

Re: PeaZip: Open-source file compression and encryption software

#42
LOVE peaZip! What I especially like about it is in my experience it’s been very portable on linux, and the gui has always been portable as well. (it works on Tails - so it’s great for putting onto a USB stick that contains encrypted zip / veracrypt archives for when you need to access those on an air gap d machine.)

Re: PeaZip: Open-source file compression and encryption software

#43
post #15

PeaZip is great software, and doubly so because it is written using Lazarus and compiled with Free Pascal. I highly recommend giving it a try, if only to experience that high quality software can be built using tools that lead you somewhat off the beaten path. Unfortunately, its lead developer has recently posted[0] that he has to undergo what seems to be complicated, major eye surgery, and that he will probably be u…

Somewhat related: GID (for Generic Image Decoder) is written in Ada and significantly outperforms ImageMagick (written in C) in some benchmarks.

https://gautiersblog.blogspot.com/2024/03/benchmarking-gener...

Re: PeaZip: Open-source file compression and encryption software

#44
post #3

Earlier quoted context omitted.

Moving files from one directory to another directory on the same filesystem doesn't actually result in any data getting moved, only the directory entries are changed

Let's start slicing the pie, everyone. On Linux this is becoming a rarity; '/tmp' (the usual $TMPDIR) is mounted using tmpfs , a distinct memory-backed filesystem. Windows on the other hand is happy for this to reside on your physical disk, persistently. I think - this isn't my area. This almost guarantees your "yes, but" doesn't apply for anyone using Fedora Linux, for example. I dare say nearly any distribution tha…

/tmp is often not tmpfs, in fact. /dev/shm or /var/run are.

Re: PeaZip: Open-source file compression and encryption software

#45
post #39
post #15

PeaZip is great software, and doubly so because it is written using Lazarus and compiled with Free Pascal. I highly recommend giving it a try, if only to experience that high quality software can be built using tools that lead you somewhat off the beaten path. Unfortunately, its lead developer has recently posted[0] that he has to undergo what seems to be complicated, major eye surgery, and that he will probably be u…

I like seeing software written in Free Pascal, they tend to be small and performant. Cheat Engine[0] is another example. [0] https://github.com/cheat-engine/cheat-engine

I searched around and found this tutorial[0] on the official wiki. Seems like a decent intro to the history & syntax of the language. There’s also another tutorial[1] on the more modern iteration of the language, as well as some video tutorials[2] on using the IDE for GUI development.

[0]: https://wiki.freepascal.org/Basic_Pascal_Tutorial/Introducti...

[1]: https://castle-engine.io/modern_pascal

[2]: https://wiki.freepascal.org/Lazarus_videos

Re: PeaZip: Open-source file compression and encryption software

#46

Earlier quoted context omitted.

Let's start slicing the pie, everyone. On Linux this is becoming a rarity; '/tmp' (the usual $TMPDIR) is mounted using tmpfs , a distinct memory-backed filesystem. Windows on the other hand is happy for this to reside on your physical disk, persistently. I think - this isn't my area. This almost guarantees your "yes, but" doesn't apply for anyone using Fedora Linux, for example. I dare say nearly any distribution tha…

/tmp is often not tmpfs, in fact. /dev/shm or /var/run are.

Yes, and? It still is very common to find. Turns out things aren't homogeneous. People often both die forever-alone and happily married, too.

I already said it's up to the distribution. I wasn't really interested in splitting it more than I have, I hoped to avoid it... but let's go. It's been upstream over a decade

https://github.com/systemd/systemd/commits/main/units/tmp.mo...

Participation, as always, has been/remains optional. Anything using 'systemd' will likely have this be 'tmpfs', unless 'ConditionPathIsSymbolicLink' is violated.

Anything not using 'systemd' is a niche that most of the industry ignores. See how uninsightful/unhelpful these statements are?

More specifically, this leaves the one directive/condition to consider... and a subset of a subset that's relevant - systems using runit/s6/whatever.

Anyway, that's the fun thing about 'often'. It both often is and isn't. Put simply, word games.

We're both right, '/tmp' often is and isn't 'tmpfs'. It's an implementation detail. It's codified into some standards, and it turns out some distributions are more prepared/cognizant than others.

The inconsistency in applying this makes the assertion that lead to this whole thread off base.

edit: I originally mistook the last edit two years ago for the creation time - adjusted. This has been established for ~14 years!

Re: PeaZip: Open-source file compression and encryption software

#47
post #33
post #28

Earlier quoted context omitted.

I hate that PeaZip does not support passwords with a quotation mark (") in the UI. I haven't reviewed the code, but I am assuming that they are neither passing the password via a variable (linked library) nor via an execve call (less secure), but via some sub-shell which is a common attack vector and bad security practice. But as I said, I haven't reviewed the code.

I haven't ran nor looked at the code for PeaZip, but the website describes the program as a GUI wrapper around command line utilities. I highly suspect it's the sub-shell thing.

That's concerning. What if your archive password is ;rm -rf --no-preserve-root /? There might be an easy CVE for the taking here.

Re: PeaZip: Open-source file compression and encryption software

#49
post #18

Programs like 7-zip and PeaZip both have an unusual feature: Ability to explore NT paths that Windows Explorer will refuse to load. You can go to a path like "\\?\Harddisk0Partition2\" in 7-zip file manager or PeaZip. On my PC, that happens to be the EFI partition. (Need to run as Admin before it lets you access the EFI partition) Sysinternals WinObj will let you see all the paths in the NT Object Namespace. To conve…

TIL, thanks! To add to this list of unusual features, 7-zip can also parse many self-extracting PE executables and display the executable sections of ELFs and PEs. I'm not sure if this has been documented anywhere, though.

7-zip version 15.05 will also decompile NSIS scripts (Nullsoft Installation System), but the feature was taken out of newer versions.
Post reply on HN