7-Zip boycotted? The callers have committed "three crimes": pseudo open source, unsafe, and the author is from Russia!

Arrangement | Zheng Liyuan

Produce | CSDN（ID：CSDNnews）

When talking about the software that must be installed on the computer , Compression software is definitely a . Because everyone has different needs , The compression software they choose is also different , Such as WinRAR、360 Compress 、7-Zip、BandiZip、 Fast pressure, etc , Which is completely free and open source 7-Zip It is favored by many users .

As an open source compression software ,7-Zip Published on 1999 year , Most of the source code is based on GNU LGPL Under the license agreement , Used LZMA And LZMA2 The algorithm makes it have a very high compression ratio , Small size is also a big advantage .

（ The picture is from 7-Zip Chinese official website ）

However , Recently, a man named Paul But the developers of have published An article called for a boycott 7-Zip The article , The reason given by its title is ：“ Co., LTD. ” The open source & safety problem .

One 、Paul to 7-Zip Settle “ Three sins ”

However , After reading this article as a whole, we can find that ,Paul to 7-Zip The decision is “ Three sins ”.

• The first crime ：“ Co., LTD. ” The open source

As I said at the beginning , Most of the 7-Zip The source code of is based on GNU LGPL License agreement release , Its open source attribute should be beyond doubt .

and Paul Think 7-Zip Open source “ Co., LTD. ” The point is ：7-Zip Your code is not hosted in Github、Gitlab Or any other public code hosting platform , Only in its official Sourceforge Page src.7z Find , and “ No history 、 No submitters 、 Isn't there a name 、 No documents , Just an archive ”.

About this sole trusteeship 7-Zip Source code Sourceforge platform ,Paul Frankly speaking, its reputation is not good ：“Sourceforge Was accused of being in Windows.exe Files and self extracting files contain spyware and malware .”

And for “ No history 、 No submitters 、 Isn't there a name 、 No documents ” this ,Paul Also speculated , This may be because 7-Zip The author of does not want developers to build applications through source code , Having a commit history makes it easier to track any changes and recover any erroneous parts , It is also easier to transport “ Hidden dark elements ”, Such as hidden telemetry or back door .

• The second crime ： There are security issues

stay Paul It seems ,7-Zip Not only have there been many loopholes in the past , Previously exposed loopholes in raising rights CVE-2022-29072 It has not been repaired yet , There are obvious potential safety hazards .Paul Also cited 2012 In, the author responded to the comments suggested by users ：“ There is no time to do these things now , Maybe I will see it later .”

besides ,Paul Also pointed out 7-Zip The installer for never seems to set the signature ——“ Signing verifies the vendor and prevents bad people from installing the software ”.

• The third crime ： The software author is a Russian developer

boycott 7-Zip The third reason Paul Not reflected in the title ：7-Zip It's a Russian Developer Igor Pavlov Developed ,“ In the current situation, in order to support Ukraine , It is better not to use Russian software ”.

Cite the above “ Three sins ” after ,Paul Finally, I recommend some 7-Zip substitute , Such as PeaZip、NanaZip, Also with 7-Zip Quite Zstd（Zstandard） etc. .

Two 、 Net friend ：“ Some conspiracy theories ”

Paul This boycott 7-Zip What are you saying reddit There was a lot of discussion on the Forum , But judging from the comments ,Paul Your goal has not been achieved ： Most people think Paul The reason is untenable , And attack Paul Of “ Conspiracy theories ”.

In the discussion post , The person with the highest number of likes is named qvop Comments from netizens ：

Even if 7-Zip The source code is not in Github、Gitlab And so on , So what? ？ It's still open source , There is no requirement that open source must host code on certain platforms , I think so Paul There is something wrong with your cognition .

actually ,7-Zip stay Sourceforge There are some source codes on （ Relatively few ） Document , It includes the change log and a description of how to compile the program and some of its internal work . and , If developers only want to develop alone 、 Don't want to seek contribution , Then it is useless to open source these unnecessary things .

Paul Think 7-Zip The statement that the author deliberately does not let developers build applications through source code is almost “ Conspiracy theories ”, because At present, there is no evidence to support this statement , contrary 7-Zip There are more than 20 Years of development and maintenance records .

Besides , because 7-Zip It would be foolish to give up using open source software because of the author's nationality , In particular, there is no indication that the author has any conflicting positions .

To make a long story short , For me, , This article is a hodgepodge , There are also some rights and conspiracy theories .

besides , Many netizens are also right Paul Published this blog post to satirize ：“ In one sentence , The sender doesn't like 7-Zip The author's name ”、“ Do not defend this article , The author is an idiot ”、“ I will continue to use it , thank you , I don't see any reason to stop using it ”.

“ Open source has no borders ” It has always been the slogan of the open source community , However, in the current international situation , This slogan seems to be a little untenable ：GitHub Block Russian developer accounts 、 Started in Russia NGINX Open source projects are banned …… These events have attracted many open source enthusiasts to “ Open source ” Question the nature of ,Paul Call for a boycott 7-Zip The third reason is that many people can not understand ：“ Do we have to consider the nationality of the author when we choose to use open source software in the future ？ It's really strange .”

that , You know Paul What do you think of your remarks ？ What kind of compression software do you usually use ？

Reference link ：

• https://nixsanctuary.com/boycott-7-zip-limited-open-source-security-issues/

• https://www.reddit.com/r/opensource/comments/vkjl80/boycott_7zip_limited_open_source_security_issues/