sigmoid.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A social space for people researching, working with, or just interested in AI!

Server stats:

592
active users

#zip

1 post1 participant0 posts today

Operation DRAGONCLONE: Chinese Telecom Targeted by Malware

A sophisticated cyber campaign targeting China Mobile Tietong Co., Ltd., a subsidiary of China Mobile, has been uncovered. The operation, dubbed DRAGONCLONE, utilizes VELETRIX and VShell malware to infiltrate systems. The attack chain begins with a malicious ZIP file containing executable files and DLLs, exploiting DLL sideloading against Wondershare Repairit software. VELETRIX, a loader, employs anti-analysis techniques and IPFuscation to decode and execute VShell, a cross-platform OST framework. The campaign shows infrastructure overlaps with known China-nexus threat actors like UNC5174 and Earth Lamia. The attackers utilize various tools including Cobalt Strike, SuperShell, and Asset Lighthouse System for reconnaissance and post-exploitation activities.

Pulse ID: 6842f45696f96557e5f757b1
Pulse Link: otx.alienvault.com/pulse/6842f
Pulse Author: AlienVault
Created: 2025-06-06 13:59:50

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

LevelBlue Open Threat ExchangeLevelBlue - Open Threat ExchangeLearn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.
Replied in thread

@spacehobo @brouhaha @tastytronic

Talking of cool formats:

I was just thinking of Rahul Dhesi's ZOO after posting that, coincidentally.

The format was designed so that backwards seeks were only necessary when actually deleting/updating entries. One could do a list entirely forwards, and even purging deleted entries could be done entirely forwards.

Then the world went and settled on ZIP, which needed several backwards seeks just to find the central directory.

One has to appreciate that #Rust programmers are rediscovering all of these old problems anew almost 40 years later. (-:

github.com/zip-rs/zip2/pull/19

#ZIP#ZOO#magtape

So @rl_dane introduced #bzip3 to me to use instead of #bzip2. Let's turn some bz2 files into bz3 to see the difference.

First example: 90k opus files

hey snips wake word dataset. It has ~90k opus files and a tar file of 3.1GB. bzip2 produces the same 3.1GB which is as expected. bzip3 created 3.0GB but used tons of computation power. Not worth the 100MB

Second example: Windows 7 virtual box VM image

Windows7.vdi it's Windows 7 VM image for the "special" days. I think I have to get rid of it. But while it is still there, let's see how each will perform. It is 16GB uncompressed. bzip2 -9 is 7.0GB. bzip3 is 6.3GB but at the expense of like 3x CPU time. Deleting all of them anyway. Down with Windows.

Third example: Pure XML text file

Pure XML file. It's Persian and English characters. Uncompressed is 1.7GB. bzip2 -9 is 276M while bzip3 is 260MB

Final example: Creating a simple bomb

So I did this:

dd if=/dev/zero of=./justzero bs=2G count=6

So now I have a 16GB with only zero bytes. bzip2 -9 is 672KB. bzip3 is 46KB.

Conclusion

Thank you @rl_dane

Real nice thing!

Looking for a simple way to provide a compressed archive from a web application with the requirement to create the archive in the browser, not on the server.

- JSZip: 12 (transitive) dependencies
- tar-js: 0 dependencies

While zip may be more common, the 0-dependencies is a unique selling point for me!

#javascript#zip#tar
Replied in thread

@mavica_again @cstross @NF6X also lets be clear, @NanoRaptor does "Premium" #Shitpost|s or rather "#NextLevel #Memes" to the point that I'd not be surprised if she makes a #NeoFloppy / #Jaz / #Zip mashup and showcases a nonexistant "vintage" portable SSD with like old #ROM chips or #RAM chips...

  • I mean, the only reason #ODD's and #HDD's ever got built is because #CoreMemory and other storage couldn't scale up faster.

But #WhatIf it did?

New versions of Jubako projects have been released ! 🚀

- Jubako 0.3.3
- Arx 0.3.2 (including tar2arx and zip2arx)
- Waj 0.3.0

There are nice improvements on Jubako and Arx side; and Waj finally rejoins the `0.3` series, few months after Arx !

You can `cargo install` them or simply get the binaries from release pages at github.com/jubako

GitHubJubakoJubako has 10 repositories available. Follow their code on GitHub.