Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
OT: Hiding File Names in WinZip Encrypted File ?
1,428 views
Skip to first unread message
(PeteCresswell)
Feb 3, 2016, 5:59:25 PM2/3/16
to
I use WinZip and 256-bit encryption with some regularity.
But there seems to be an omission in it's scheme in that somebody can
see the names of the files in the archive even so they do not have the
PW needed to extract them.
Am I missing something?
--
Pete Cresswell
But there seems to be an omission in it's scheme in that somebody can
see the names of the files in the archive even so they do not have the
PW needed to extract them.
Am I missing something?
--
Pete Cresswell
boB
Feb 3, 2016, 7:30:06 PM2/3/16
to
On Wed, 03 Feb 2016 17:59:22 -0500, "(PeteCresswell)" <x...@y.Invalid>
wrote:
I wonder the same thing.
I think that whoever did winzp is the one who missed something.
I'm sure other programs can hide the file names but I know
that RAR can.
I often need to hide the names just to send a file to someone where
gmail would stop it from being emailed. Either hide it or rename it
which sometimes is more of a hassle than encrypting the file.
boB
wrote:
I think that whoever did winzp is the one who missed something.
I'm sure other programs can hide the file names but I know
that RAR can.
I often need to hide the names just to send a file to someone where
gmail would stop it from being emailed. Either hide it or rename it
which sometimes is more of a hassle than encrypting the file.
boB
mark lewis
Feb 4, 2016, 1:26:13 AM2/4/16
to
+ User FidoNet address: 1:3634/12.73
03 Feb 16 06:59, you wrote to All:
Pe> I use WinZip and 256-bit encryption with some regularity.
Pe> But there seems to be an omission in it's scheme in that somebody can
Pe> see the names of the files in the archive even so they do not have the
Pe> PW needed to extract them.
Pe> Am I missing something?
yup... the filenames aren't encrypted in ZIP so that they can be properly
extracted... encryption of ZIP files does not mean that the whole archive is
encrypted... only that the data of the files is...
)\/(ark
.. Do not disturb.... (already disturbed).
---
--
+++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ The FidoNet News Gate (Huntsville, AL - USA) +
+ The views of this user are strictly his or her own. +
+++++++++++++++++++++++++++++++++++++++++++++++++++++++
03 Feb 16 06:59, you wrote to All:
Pe> I use WinZip and 256-bit encryption with some regularity.
Pe> But there seems to be an omission in it's scheme in that somebody can
Pe> see the names of the files in the archive even so they do not have the
Pe> PW needed to extract them.
Pe> Am I missing something?
yup... the filenames aren't encrypted in ZIP so that they can be properly
extracted... encryption of ZIP files does not mean that the whole archive is
encrypted... only that the data of the files is...
)\/(ark
.. Do not disturb.... (already disturbed).
---
--
+++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ The FidoNet News Gate (Huntsville, AL - USA) +
+ The views of this user are strictly his or her own. +
+++++++++++++++++++++++++++++++++++++++++++++++++++++++
(PeteCresswell)
Feb 4, 2016, 8:33:39 AM2/4/16
to
Per "mark lewis" <@p73.f12.n3634.z1[ASC46]fidonet[.]org>:
file name part of the data ?
I would argue that, for security purposes,
a file's name is "Data".
e.g. "Passwords_For_NSA_Computers.txt" or
"Congressional_Cellphone_Numbers.txt"
--
Pete Cresswell
>encryption of ZIP files does not mean that the whole archive is
>encrypted... only that the data of the files is...
Sounds like a semantics issue with the developer then.... i.e. is the
>encrypted... only that the data of the files is...
file name part of the data ?
I would argue that, for security purposes,
a file's name is "Data".
e.g. "Passwords_For_NSA_Computers.txt" or
"Congressional_Cellphone_Numbers.txt"
--
Pete Cresswell
Shadow
Feb 4, 2016, 5:37:38 PM2/4/16
to
On Wed, 03 Feb 2016 17:59:22 -0500, "(PeteCresswell)" <x...@y.Invalid>
wrote:
wrote:
[]'s
--
Don't be evil - Google 2004
We have a new policy - Google 2012
Virus Guy
Feb 5, 2016, 9:46:06 AM2/5/16
to
Shadow wrote:
> > But there seems to be an omission in it's scheme in that somebody
> > can see the names of the files in the archive even so they do not
> > have the PW needed to extract them.
Yes. As a software developer, we sometimes have to send .exe's and
> > But there seems to be an omission in it's scheme in that somebody
> > can see the names of the files in the archive even so they do not
> > have the PW needed to extract them.
.dll's to people via e-mail, and packing them in password-protected .zip
files is not enough to get those files through academic and corporate
(and, increasingly, sadly, their out-sourced email choice of Microsoft's
outlook.com) mail handling systems. We have to mung the file extensions
before sending them via .zip, or use .rar.
> > Am I missing something?
>
> Yes, 7-zip
option to encrypt (or alter, or hide) file-names or file extensions when
packing .zip archives.
Winrar (and the .rar format) has this ability.
(PeteCresswell)
Feb 5, 2016, 1:24:30 PM2/5/16
to
Per Shadow:
> Yes, 7-zip
This is pure laziness, and I probably just ought to try it.... but if I
go for 7-zip and opt to encrypt the file names, will regular
plain-vanilla WinZip users who know the PW be able to decrypt those
files?
--
Pete Cresswell
> Yes, 7-zip
This is pure laziness, and I probably just ought to try it.... but if I
go for 7-zip and opt to encrypt the file names, will regular
plain-vanilla WinZip users who know the PW be able to decrypt those
files?
--
Pete Cresswell
mark lewis
Feb 5, 2016, 5:26:14 PM2/5/16
to
+ User FidoNet address: 1:3634/12.73
05 Feb 16 02:24, you wrote to All:
Pe> Per Shadow:
>> Yes, 7-zip
Pe> This is pure laziness, and I probably just ought to try it.... but if I
Pe> go for 7-zip and opt to encrypt the file names, will regular
Pe> plain-vanilla WinZip users who know the PW be able to decrypt those
Pe> files?
winzip? what about plain old original pkunzip? then there's the infozip
packages and numerous others... if you have software that is able to encrypt
the filenames, i dare say that it won't be able to be unpacked without problems
of some sort on other systems using other archivers that can handle zips...
)\/(ark
Always Mount a Scratch Monkey
.. Genius is 10% inspiration and 90% Capital Gains.
Shadow
Mar 2, 2016, 6:52:28 PM3/2/16
to
On Fri, 05 Feb 2016 13:24:28 -0500, "(PeteCresswell)" <x...@y.Invalid>
wrote:
Sorry for the very late reply. I stopped watching the group.
Right click, add to 7z archive, choose a password, encrypt.
7z archive will only be opened if you enter the correct
password, so there is no way you can see the original filename.
Both Winzip and Winrar open 7z archives.
wrote:
Right click, add to 7z archive, choose a password, encrypt.
7z archive will only be opened if you enter the correct
password, so there is no way you can see the original filename.
Both Winzip and Winrar open 7z archives.
0 new messages