Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sign releases on Windows to avoid security warnings on startup (and Windows Defender problems) #25

Open
processing-bot opened this issue Nov 12, 2019 · 6 comments
Labels
help wanted Extra attention is needed windows

Comments

@processing-bot
Copy link
Collaborator

Created by: sampottinger

It looks like new builds do not have sufficient reputation and are triggering warnings on Windows 10's SmartScreen. This may require a more expensive EV cert. It also appears that Processing 3 may not be signed for windows but likely has enough reputation to get through the screen. This means this would be a new signing process?

@processing-bot
Copy link
Collaborator Author

Created by: benfry

Sounds like it… and anything that helps us deal with false Windows Defender flags would also help. Obviously they're totally different systems, but we should keep an eye out for anything we can do here.

For the last two years or so, each release gets flagged as being afflicted by a different Windows virus (I'd be more concerned if it weren't a different one each time) and there's not much we can do.

@processing-bot
Copy link
Collaborator Author

Created by: sampottinger

Cool cool! Let me follow up on email re the EV cert.

@processing-bot
Copy link
Collaborator Author

Created by: benfry

Possible useful resource https://stackoverflow.com/questions/252226/signing-a-windows-exe-file

Also posted #173, which covers the same issues for exported applications on Windows.

@processing-bot
Copy link
Collaborator Author

Created by: benfry

Added notes to the new troubleshooting page so we have something to refer people to in the meantime: https://github.com/processing/processing4/wiki/Troubleshooting#viruses-and-trojans

@processing-bot
Copy link
Collaborator Author

Created by: benfry

Notes about the validation process (this is for SSL, but the code signing process is similar validation-wise) https://www.namecheap.com/support/knowledgebase/article.aspx/9917/68/ev-process-and-its-documentation/

@processing-bot
Copy link
Collaborator Author

Created by: benfry

Additional references:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
help wanted Extra attention is needed windows
Projects
None yet
Development

No branches or pull requests

1 participant