Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Agreed, but trusting the extension at the end of the filename for this purpose screams, "amateur hour."


Extensions were important to filter when Windows explorer was still lacking rules to forbid file execution based on provenance, but was already defaulting to a) hide the file extension and b) display whatever pixels were embedded in an executable as the file icon. The combination of a) and b) was making even moderately security aware users utterly defenseless.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: