Your Encrypted ZIP Is Announcing What's Inside It

https://hackernoon.imgix.net/images/0WrbgkiD78Tk80Brcim0C5CKgs73-8283eet.png

Take a folder, compress it into a password-protected ZIP, and send it to someone.

Now open that archive without the password.

You'll get this:

Passport.jpg 2.4 MB 2026-08-14Contract_signed.pdf 180 KB 2026-08-12Bank_statement_July.pdf 95 KB 2026-08-01

The contents are encrypted. Nobody can read a single byte of those files.

The file list is sitting right there in plaintext.

I found this out while building encrypted export into ToFolder, a local-only photo and document app I shipped this summer. I had spent a week getting AES-256 working, felt very good about myself, opened the result on my desktop to admire it, and saw every filename listed neatly in 7-Zip without being asked for anything.

Why it happens

It's the format, not the tool.

In a ZIP archive, encryption covers entry data. The central directory — filenames, sizes, timestamps, the count of entries — stays readable, because that's how tools list an archive's contents...

Copyright of this story solely belongs to hackernoon.com. To see the full text click HERE

Read more

https://cdn.mos.cms.futurecdn.net/U76sZeRd6fS2fKt5RqBYPL-2560-80.jpg

Quote of the day by ARC Prize co-founder François Chollet: 'OpenAI basically set back progress to AGI by five to 10 years' — critiquing the industry's overindulgence in large language models

Many AI developers and frontier labs are openly pursuing artificial general intelligence (AGI), which scientists describe as human-like intelligence in which a model can reason like humans and learn new capabilities outside its training data. But does that mean that they're all on the right path? Chasing the