Tar-minefield shows where tar implementations disagree
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
tar-minefield is a Hacker News project that catalogs ambiguities in the tar archive format where implementations extract the same file differently, creating security risks when scanners and extractors disagree.