tar: extracting untrusted archives

1 
1 2.8.4 Extracting Archives from Untrusted Sources
1 ------------------------------------------------
1 
1 Extracting files from archives can overwrite files that already exist.
1 If you receive an archive from an untrusted source, you should make a
1 new directory and extract into that directory, so that you don't have to
1 worry about the extraction overwriting one of your existing files.  For
1 example, if 'untrusted.tar' came from somewhere else on the Internet,
1 and you don't necessarily trust its contents, you can extract it as
1 follows:
1 
1      $ mkdir newdir
1      $ cd newdir
1      $ tar -xvf ../untrusted.tar
1 
1    It is also a good practice to examine contents of the archive before
1 extracting it, using '--list' ('-t') option, possibly combined with
1 '--verbose' ('-v').
1