• computergeek125@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    arrow-down
    1
    ·
    9 months ago

    As an IT Engineer this concept frankly terrified me and feels like your opening yourself up to a potential zero click attack - such as https://threatpost.com/apple-mail-zero-click-security-vulnerability/165238/

    So my initial answer is an emphatic “please do not the ZIP”. It could be as mundane as a ZIP bomb, or it could explain a vulnerability in the operating system or automatic extraction program. Having a human required to open the ZIP prior to its expansion reduces its attack surface area somewhat (but not eliminates it) because it allows the human to go “huh this ZIP looks funny” if something is off, rather than just dispatching an automated task.

    With that out of the way - what’s your use case with this? There has to be a specific reason your interested in saving a few clips here on one highly specific archive format, but not others like the tar unix archive, 7z, or RAR.

    • maness300@lemmy.worldOP
      link
      fedilink
      arrow-up
      1
      arrow-down
      14
      ·
      9 months ago

      I didn’t read your response beyond the first sentence.

      If Apple can do this, why can’t we?

      • computergeek125@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        1
        ·
        9 months ago

        I do not have an answer for that. But if you only plan to read one part of my answer I would suggest reading the last sentence of my response instead of the first. Can’t help you if you don’t tell me what’s wrong.

  • Moonrise2473@feddit.it
    link
    fedilink
    arrow-up
    5
    ·
    9 months ago

    I think it needs to be done by the operating system, extensions nowadays don’t have the permissions to do that.

    When I was using MacOS it automatically extract zipped files and I hated it so much, you accidentally click on a link, it automatically saves in download and automatically unzip it, leading to too much trash in downloads…

    • maness300@lemmy.worldOP
      link
      fedilink
      arrow-up
      1
      ·
      9 months ago

      leading to too much trash in downloads…

      Uhh, couldn’t they just extract it into a folder? Then it’s identical to being compressed.

  • BananaTrifleViolin@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    9 months ago

    I wouldn’t but Firefox has a Files and Applications menu where you can set what actions it performs on downloading a file. You could set that to automatically open with an zip extracting program or a batch file / bash script.

    But safari’s “feature” sounds dangerous to me - it would be a good vector to attack a system - also just bloody annoying. I wouldn’t want the content of my zip files spewed all over my downloads folder.

    But yes Firefox can hand any downloaded file over to another program on download if you want to go that way. I don’t think it can run an executable though, although again you could probably write a batch file to do that on windows (and possibly a bash script on m Linux) if you like living dangerously.

    But just because you can do something doesn’t mean you should.

  • Zorcron@lemmy.zip
    link
    fedilink
    English
    arrow-up
    1
    ·
    9 months ago

    Unpackerr is usually used for unzipping files downloaded automatically by Radar or Sonarr, but it can also be configured to point to any folder, like your downloads. It’s fairly easy to set up, especially if you’re just pointing it to a folder.