Conversation

the gnu fans are rallying around some extra flimsy arguments to try and justify their failed movement huh

Quote Tweet

Apr 15, 2021

> including Android C and C++ code in Android is compiled with Clang and linked with LLD, not GCC and binutils. That includes the Linux kernel. > tar, gzip or man There are multiple widely used non-GNU implementations of all 3 commands. There's no GNU implementation of man...

Replying to

its a Well Known Fact that the BSDs use pkzip since they don't have tar.

spoobers

just bob, don't be scared

Replying to

and

They don't?

just bob, don't be scared

Replying to

and

I'll be it's patched in on openbsd

Replying to

and

libarchive's tar (FreeBSD tar) will happily extract RAR or CAB file: github.com/libarchive/lib In the Linux world, nearly everyone uses dead Info-Zip from 2008/2009. Has a bunch of known vulnerabilities partially patched downstream by distributions: infozip.sourceforge.net Fun.

4:26 PM · Apr 15, 2021Twitter Web App

Retweet

Likes

spoobers

just bob, don't be scared

Replying to

and

Reckon you can't swing a stick without hitting vulns, all you have to do is look. Enough to make a mf paranoid.

Replying to

and

libarchive is actually pretty awesome as long as you ignore the horrifying attack surface from it guessing the file type and applying the appropriate half-baked implementation of an obscure format. It'd work just as well for my usage if it simply went by the file extension...

Show replies

Replying to

Yep, a number of patches for that one. cvsweb.openbsd.org/cgi-bin/cvsweb Oh, heh, we pledge(2) unzip too.

Replying to

I really despise Info-Zip. It has terrible performance and I spend a lot of time waiting for zip files to be assembled. An APK file is a zip file with a standard manifest and signature format. An APEX file (source.android.com/devices/tech/o) is an APK with an embedded file system image.

Show replies