Hacker News new | ask | show | jobs
by dragontamer 2981 days ago
> On this we agree. The question is, how seriously does security deserve to be taken in this case?

Well consider exactly what 7-zip is: its a plugin to explorer.exe that will always be running. Its embedded into your "right click" button and is running at all times.

Any code that takes over 7-zip can take over explorer.exe on your typical use of 7-zip. I personally think its position as a explorer.exe plugin demands some kind of security posture.

1 comments

That isn't how explorer's right-click context menu works. It's basically just a list of file extension pattern matches in the registry and command line to call when they're clicked:

  [HKEY_CLASSES_ROOT\7-Zip.7z\shell\open\command]
  @="\"C:\\Program Files\\7-Zip\\7zFM.exe\" \"%1\""