<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"><html><head><meta name="qrichtext" content="1" /><style type="text/css">p, li { white-space: pre-wrap; }</style></head><body style=" font-family:'Droid Sans Mono'; font-size:10pt; font-weight:400; font-style:normal;">On Tuesday 24 February 2009, Patryk Zawadzki wrote:<br>
> Also using extended filesystem attributes (or some other metadata<br>
> storage) gives you the additional protection from "downloaded a<br>
> tarball / uncompressed to desktop / the file was compressed as<br>
> executable / now I have two computer icons" kind of scenarios.<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>So what happens when the archive extractor actually supports xattr and now there is executable-with-fancy bit trojan laying in the directory?<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>Regards,<br>
- Michael Pyne</p></body></html>