frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Claude broke a ZIP password in a smart way

7•jgrahamc•10h ago
Today, I was working on a project with Claude and it needed to open a ZIP file. I'd forgotten that the ZIP was password protected (it's part of a complex file format that's a ZIP of ZIP files and other data). Here's a redacted part of Claude's output:

    I'll attempt some common password variations based on the project    
    identifiers and metadata I've found - the project ID itself, the 
    certificate ID, the license number, and the names associated with the 
    project.

    Try more project-specific passwords
    (Script)

    The password is "xxxxxxxxxxxx"! Now let me extract the files.
What's interesting is the approach it took. It figured the password might be related to the project in which this ZIP was embedded. It made a list of possible passwords from the context and tried them all. And it worked.

But the funniest part is that when I originally received this ZIP file I did exactly the same thing. Rather than wait for the sender to tell me the password I guessed they'd set something based on their name, the file name, the project etc.

Comments

ata-sesli•5h ago
Interesting approach from Claude. I wonder what the next step would have been if none of the context-based guesses worked.
Jeremy1026•4h ago
Easy way to find out would be to password protect a zip file with gibberish and ask it to help you get into it. See where it goes.

I gave it a try. I zipped a folder and gave it the password "aabbccdd". I told Claude I got some planning documents I want to implement, they are at <location.zip>. It tried to extract but couldn't because of the password. It asked for the password, I told it that I wasn't sure what it was. It listed the contents of the zip, but again was stumped because of the password. It suggested I ask for the password from the sender, check my email for the password, or if I remembered any possible passwords. I told it that I think the password was related to the project, so it tried variations of capitalizations on the name of the root directory for the project. It then asked if it might have some numbers like the date and that "Any additional hint would help narrow it down."

Tl;dr - It didn't really have a 'next step' to figure out the password.

Tell HN: iPhone 6s still getting security updates

4•uticus•3h ago•2 comments

Why I'm moving away from Regex for LLM Agent security

2•aunicall•4h ago•0 comments

Ask HN: Have you successfully treated forward head posture ("nerd neck")?

41•trashymctrash•16h ago•30 comments

Ask HN: What was it like for programmers when spreadsheets became ubiquitous?

7•yodaiken•8h ago•7 comments

I built a platform to help developers find collaborators for new projects

3•deiv2002•11h ago•0 comments

How not to fork an open source project

5•jsattler•12h ago•0 comments

Toolpack SDK, an Open Source TypeScript SDK for Building AI-Powered Applications

2•sajeerzeji•9h ago•1 comments

Prompt to make Claude more autonomous in web dev

4•louison11•10h ago•1 comments

Claude broke a ZIP password in a smart way

7•jgrahamc•10h ago•2 comments

Ask HN: How do you use Coding Agents/CLIs out of coding?

4•arbayi•15h ago•5 comments

I traced $2B in nonprofit grants for Meta and Age Verification lobbying

89•theseusares•1d ago•20 comments

Ask HN: Why can't we just make more RAM?

23•chatmasta•1d ago•21 comments

Tell HN: Apple development certificate server seems down?

109•strongpigeon•4d ago•39 comments

MiniMax M2.5 is trained by Claude Opus 4.6?

10•Orellius•1d ago•10 comments

Ask HN: Got cancer, a new job,new boss in less than a year What do I do now?

19•Goleniewski•1d ago•17 comments

Ask HN: Would this eliminate bots for good?

2•piratesAndSons•14h ago•11 comments

Ask HN: 100k/year individual token usage?

7•alecsmart1•23h ago•3 comments

Ask HN: What's your biggest pain point when joining a new developer team?

8•KevStatic•1d ago•15 comments

Ask HN: Why have co-ops never played a major role in tech?

13•AbstractH24•1d ago•7 comments

Generate tests from GitHub pull requests

7•Aamir21•1d ago•3 comments

X is selling existing users' handles

197•hac•3d ago•91 comments

Ask HN: Is there prior art for this rich text data model?

5•chrisecker•1d ago•2 comments

Ask HN: Is Claude down again?

86•coderbants•3d ago•73 comments

Ask HN: Has anyone built an AI agent that spends real money?

3•xodn348•1d ago•4 comments

AI, Human Cognition and Knowledge Collapse – Daren Acemoglu

3•aanet•1d ago•3 comments

Ask HN: Looking for a job after layoff and burnout. What should I focus on

6•jacAtSea•16h ago•10 comments

Looking for Partner to Build Agent Memory (Zig/Erlang)

6•kendallgclark•2d ago•8 comments

Enabling Media Router by default undermines Brave's privacy claims

5•noguff•2d ago•2 comments

Instagram Ending Encrypted DMs

6•01-_-•1d ago•1 comments

Claude 4.6 Opus can recite Linux's list.h

25•itzmetanjim•2d ago•4 comments