---

驚人！高手自製「解壓縮炸彈」能把 46MB 變 4.5PB


文／記者黃敬淳／自由
2019-07-15 11:12

https://img.ltn.com.tw/Upload/3c/page/2019/07/15/190715-37385-1.png
（圖／翻攝自 Pixabay）



因效果類似炸彈，這種攻擊方式也被不少人以「解壓縮炸彈」（Zip Bomb）來描述。

而據外媒《VICE》消息，有趣的是，一名研究員 David Fifield，則展示了一個驚人的「
解壓縮炸彈」，能夠將 46MB 小巧壓縮檔，經過解壓縮程序後變成 4.5PB，相當於
4,500TB，是足以「轟炸」伺服器主機的等級。去年，David Fifield 的技術還沒那麼驚
人，但也能製作出將 42kb 變為 5.5GB 的壓縮檔。

他的早期範例，還有 10MB、但能夠膨脹到 281TB 的「解壓縮炸彈」。




https://3c.ltn.com.tw/news/37385

--

New Zip Bomb Stuffs 4.5PB of Data into 46MB File
http://tinyurl.com/yypcumjc

As he writes on his blog:

   This article shows how to construct a non-recursive zip bomb whose
   compression ratio surpasses the DEFLATE limit of 1032. It works by
   overlapping files inside the zip container, in order to reference a
  “kernel”of highly compressed data in multiple files, without making
   multiple copies of it. The zip bomb’s output size grows quadratically
   in the input size; i.e., the compression ratio gets better as the bomb
   gets bigger. The construction depends on features of both zip and
   DEFLATE—it is not directly portable to other file formats or compression
   algorithms. It is compatible with most zip parsers, the exceptions
   being“streaming”parsers that parse in one pass without first consulting
   the zip file’s central directory.

--


--
--
※ 發信站: 批踢踢實業坊(ptt.cc), 來自: 117.19.176.69 (臺灣)
※ 文章代碼(AID): #1TA_djH- (Gossiping)
※ 文章網址: https://www.ptt.cc/bbs/Gossiping/M.1563163117.A.47E.html