91–96 of 96 posts
Earlier quoted context omitted.
Hmm...excited to hear that I can stop devoting time to figuring out why my wife's laptop constantly runs its fan due to service processes that constantly burn CPU!
You can hear the fan from another room on my laptop! Thanks svchost.exe! I disabled updates, but it still does... something while I am sleeping.
Earlier quoted context omitted.
https://twitter.com/wdormann/status/955802146045353985 DEP would be nice, wouldn't it? IIRC, Igor finally added DEP a few months ago (NXCOMPAT if you need to google the Internet Drama). But the fact that he was running this code without lol DEP until January of THIS YEAR makes me suspect his coding practices. As per this other page: https://landave.io/2018/01/7-zip-multiple-memory-corruptions... > I have discussed th…
> Igor is not someone who seems to take security seriously. On this we agree. The question is, how seriously does security deserve to be taken in this case? The evidence suggests not very seriously at all. As horrifically insecure as 7z is by your metrics, I can't think of a single incident of it ever ruining anyone's day, unlike a lot of modern software that manages to do that while supposedly being "secure" and fun…
Well consider exactly what 7-zip is: its a plugin to explorer.exe that will always be running. Its embedded into your "right click" button and is running at all times.
Any code that takes over 7-zip can take over explorer.exe on your typical use of 7-zip. I personally think its position as a explorer.exe plugin demands some kind of security posture.
(requires Feedback Hub App on Win 10 to view)
Earlier quoted context omitted.
Excuse me what? That's how pretty much all non-managed APIs work
It certainly is an OS bug. The OS is modifying your memory behind your back after it has given it to you. That can break any application, managed or otherwise.
Earlier quoted context omitted.
> Igor is not someone who seems to take security seriously. On this we agree. The question is, how seriously does security deserve to be taken in this case? The evidence suggests not very seriously at all. As horrifically insecure as 7z is by your metrics, I can't think of a single incident of it ever ruining anyone's day, unlike a lot of modern software that manages to do that while supposedly being "secure" and fun…
> On this we agree. The question is, how seriously does security deserve to be taken in this case? Well consider exactly what 7-zip is: its a plugin to explorer.exe that will always be running. Its embedded into your "right click" button and is running at all times. Any code that takes over 7-zip can take over explorer.exe on your typical use of 7-zip. I personally think its position as a explorer.exe plugin demands…
[HKEY_CLASSES_ROOT\7-Zip.7z\shell\open\command]
@="\"C:\\Program Files\\7-Zip\\7zFM.exe\" \"%1\""Earlier quoted context omitted.
I've dug into it several times. First it was network adapter, which for some reason had a default setting to wake on any received packet (lol, wut?). Then it was waking because there was some setting deep in the system about waking up for scheduled operations. (not scheduled tasks, but timers within individual processes... why???) Now it started again but this time the power management tools report no reason for the…
Do you have a Display port monitor, by any chance? After adding one, I found out that when the display goes to sleep, Windows sees it as a disconnection, and 'helpfully' wakes up to reorganize all the windows onto one display. That wakes up the Display port monitor, which triggers another reorganization, and the cycle begins again.