Their entire security model depends on knowing file extensions, but they still hide them. Even if you enable it, there are some extensions that still won’t show, like .lnk (shortcut file). You can absolutely have executable code, and therefore malware in a .lnk file.
Comment on You could get anything you wanted and it was FREE
DmMacniel@feddit.org 18 hours agoI blame Windows, as it (I believe) hid file extensions of known file types by default. Was it, because it was aesthetically more pleasing? I dunno but it sure was a hazard for the unaware user.
Limonene@lemmy.world 17 hours ago
Buddahriffic@lemmy.world 17 hours ago
I believe there were also files like “yoursong.mp3 .exe” (not sure how this will render, but lots of spaces before the .exe so it would be hidden by the UI even if extensions weren’t hidden).
Custom icons didn’t help either, since they could just use the default icon for the spoofed file type. Though using a different program that changed the icon would negate that and make any of them obvious.
Also helps to use a method other than double clicking the file to open it, like drag and drop. Which was my usual flow with mp3s anyways because I generally added them to my massive playlist and double clicking risked replacing my playlist (that might have not been saved in forever) with a playlist with just that single song.
I liked it when winamp added the media library. Took me forever to rate my songs, but eventually my “new song flow” was move the new album folder to the artist’s folder in my music folder then tell winamp to rescan for new files, and then import my 3+ star or unrated songs as my playlist, played on shuffle. And occasionally grab a new format plugin if the album was encoded as something new and rescan until the new songs show up. Then give any noise or gag tracks 1 or 2 stars so they don’t make it to my main list after the first listen.
grue@lemmy.world 16 hours ago
I believe there were also files like “yoursong.mp3 .exe” (not sure how this will render, but lots of spaces before the .exe so it would be hidden by the UI even if extensions weren’t hidden).
Replace your double-quotes with backticks, like this:
yoursong.mp3 .exe.
Dicska@lemmy.world 2 hours ago
While it’s super annoying for the tech savvy, and gives a great opportunity to ill willed tech people, I’m sure it was an idiot proofing move. The average user is a not-so-tech-savvy office person, having relatively fuck all knowledge on extensions, and back in the time pretty much all programs got picky when facing an unknown/unsupported extension. Your average Joe/Jolene opened ‘veryimportantspreadsheet.xls’, renamed it to ‘veryimportantspreadsheetnew’ (without the extension), and made it impossible for Excel to open it by double clicking. Then in the best case they triggered an IT support request; in the worst case they reported that the very important spreadsheet got lost/corrupted and data was lost.