Get the latest tech news
How to destroy your OS with tar
A dangerous case of tar archive unpacking
Fortunately, booting in a single mode and detailed analysis of the tar archive revealed the root cause. This fake environment allows you to create a tar archive with files owned by root without changing their real owners. However, during extraction, the format is automatically detected, and it also doesn't change the permissions of the current directory, even if it exists in the archive!
Or read this on Hacker News