[anlsh]

Why does a password-protected zip file reveal a list of the files within lol?

If I'm understanding this right, we'd have been hosed if the files had been TARd first?

[emmelaich]

And then encrypted? Not sure, the known structure of tar (or zip) can help with decryption.

[edit] ...

This is addressed in the article. In fact the zip contained a zip and this helped!

> He realized the zip file contained another zip file, and that since all he needed was the right original text for a specific part of the scrambled text, his best chance was using the first file name mentioned in the zip within the zip.