• Quetzalcutlass@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    ·
    edit-2
    24 hours ago

    That seems less like them decrypting encrypted archives and more like the zip format not encrypting filenames so they’re easily read from the zip’s metadata.

    Which is still a privacy violation, to be clear, but not nearly on the same scale as somehow obtaining and using your passwords to decrypt data you yourself encrypted.

    • Blue_Morpho@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      16 hours ago

      That was what someone claimed but it isn’t true. Filenames are not accessible in an encrypted zip.

      • Pika@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        4
        ·
        edit-2
        12 hours ago

        it depends on the type of zip encryption, the default doesn’t encrypt metadata

        edit: upon looking into it further, the other commenter is right, the zip format itself doesn’t actually support encrypting metadata at all, you would need to use a different format such as 7z to obtain it.

      • Quetzalcutlass@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        edit-2
        13 hours ago

        They are visible, you can test this yourself. Open a password-protected zip with 7zip and it’ll show the file list even without entering the password. The “encrypt file names” checkbox doesn’t even appear when creating an archive if the zip format is selected, so I’m not sure the format supports it.