HN Hall of Fame Weekly email

A better zip bomb

www.bamsoftware.com Essays & writing Essays & articles Security & privacy Candidate
Screenshot of www.bamsoftware.com captured 2026-07-20
Page preview · captured 2026-07-20

Resurfaced independently across 2 calendar years, with breakout response in 2 of them.

submissions
3
submitters
3
observed span
2019–2025
peak thread · 131 comments
483 pts
latest 20+ return · 2025-12-19
186 pts

Submission timeline

2007–2026

One slot for every year since HN launched. Height is that year's peak points; orange marks a 100+ point or 50+ comment breakout. Select a bar to open its strongest thread.

First comments on top threads

HN comment order

I recently created a zip validator and decoder for scanning email attachments, @ronomon/zip. It's not yet open-sourced but it has defenses against excessive compression ratios, mismatching local and central directory headers, ambiguous filenames, directory traversals and symlink traversals, and anything ambiguous that could exploit differences in zip implementations, e.g. some zip implementations decode from the front while others decode from the back. Most importantly, it balks at deviations from the zip format…

_urga·483-point thread·

The fact that ZIP files include the catalog/directory at the end is such nostalgia fever. Back in the day it meant that if you naïvely downloaded the file, a partial download would be totally useless. Fortunately, in the early 2000s, we got HTTP's Range and a bunch of zip-aware downloaders that would fetch the catalog first so that you could preview a zip you were downloading and even extract part of a file! Good times. Well, not as good as…

arjie·186-point thread·

The first top-level comment from each of the four biggest threads, in HN’s own order. Excerpts are shortened; open a comment for full context.

Breakout years
2

100+ points or 50+ comments

Total points
671

reference only — not used in Hall rules or ranking

Total comments
187

reference only — not used in Hall rules or ranking

Every submission

DateTitle as submittedByPointsComments
2019-07-04A better zip bombFirst breakout · Best threadmasklinn483131
2025-03-21A Better Zip Bombfanf220
2025-12-19A better zip bomb (2019)Latest 20+ point returnkekqqq18656