Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
@kiki you wrote that all over yourself...and on the topic why not just use pass protected rar instead. didn't find programs that can break that ( was searching one while ago... for a forgotten pass or something from the net ( I need that crack don't give me that protected rar... ) )
-
@We3D if you have a six digit password, the archive format alone won’t save you. It won’t matter if you use zip, rar or 7z. Archive is not your backend, you can’t rate limit or ban requests. Brute force remains a viable option in offline attacks. The only thing that can kinda-sorta save you is bcrypt/scrypt and other blowfish derivatives — they are very slow by design. But I never saw their common adoption in archiving data.
-
@kiki yep, but since Zip is MS archiver they know the encryption methods, the used spice and that may make it easier for them to decrypt even longer passes and when they don't know the used algorithm should be harder to crack it was my main point, it may not be rar but anything out of their control should make it even safer to upload on their servers =]
-
@We3D does 7zip fix this?
-
@Demolishun it should, even that is based on zip as long as M$ don't have access to the source should be safe enough ( while still follow @kiki's advice for longer pass too )
-
@We3D hmmm… I didn’t connect the dots on this one. Thanks
-
@We3D isn't zip an open standard?
-
@iiii is it now. I just stay away by default where MS is involved ( and if my memory don't plays some tricks on me I think they are in the Zip case )... just to be on the safe side ;}
-
@Demolishun There are no primes involved - it is just good ole symmetric encryption.
If you choose AES256, the bruteforceability solely relies on the password's entropy. So just autogenerate a password with 256 bits of entropy and Microsoft won't decrypt your archive simply because they technically can't.
Microsoft brute-forces password-protected archives in OneDrive.
“Microsoft will decrypt, open, and scan protected Zip archives uploaded to the company's cloud servers in search of potential computer threats. Security researcher Andrew Brandt recently discovered the issue while trying to share malware samples with other researchers through SharePoint.”
This is when I encrypt my archives, I use _very_ long passwords generated by Bitwarden. Like this: qkYdE5i@27yHTTj8YsMDKQ9^mo$j@!P^M4qA95Y5VqR*53otAMuMv$9sdxtF4HAuNdAYoW9RPVxucJ3
Good luck bruteforcing that, Microsoft!
https://techspot.com/news/...
random