Reply to post: Re: Doesn't make any sense

Google Chrome to block file downloads – from .exe to .txt – over HTTP by default this year. And we're OK with this

bombastic bob Silver badge
Unhappy

Re: Doesn't make any sense

"Windows has been in the habit of taking action on a file -- typically executing it -- based on the name and/or extension"

This is mostly a two-sided problem. On the one side, file extensions are used to identify files of a particular type by applications that trust the content to match the extensions. *THEN* they CLUELESSLY pass the thing on to 'ShellExecuteEx()' or similar functions that actually scan the header to determine what to do with it. So an executable file renamed "harmless.zip" gets passed to 'ShellExecuteEx()' as-is with default parameters and it RUNS AS AN EXECUTABLE (rather than opening the program that is supposed to view ZIP files) and *VOILA* your computer is spamming others, logging your keystrokes, and cranking out blockchains!!!

Well, you get the idea.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon