Comments (9)
It shouldn't per its VirusTotal results it's not detected as a False Positive by Microsoft
The full results are here:
https://www.virustotal.com/gui/file/03ad9794200346d393ff1e14ece895ac8184a1fa179cc13561b3fdfe7a2df6d1/detection
I don't know the exact translation but I know that Chrome blocks uncommon downloads, this may be a similar feature.
from whynotwin11.
This is due to Microsoft Smartscreen. Not sure how you can bypass that other than disabling smartscreen.
from whynotwin11.
Consider printing the artifact's hash as part of the workflow @rcmaehl. While this won't help with Edge's warning, it will allow users to know that the binary they are downloading is built from this repo.
from whynotwin11.
I am pretty sure that @rcmaehl builds release builds locally. And to my knowledge autoit doesnt produce reproducible binaries (but I didn't read much into it, so maybe it is possible)
from whynotwin11.
Releases should have binaries from the CI. Safety is a concern with projects like this. As long as the build comes from the CI, there is no need for reproducible binaries. The process would go like this.
- CI compiles binary.
- CI prints hash of the binary.
- New release is published with the CI's binary, either automatically or manually.
- The integrity of the release's binary is verified by comparing its hash to the hash from the CI.
from whynotwin11.
Microsoft SmartScreen has block first-seen feature, which blocks executables are first seen on the Internet. Ignoring the prompt is okay for this project.
As for developer, a workaround is to zip the release executable file.
from whynotwin11.
zipping the file doesnt help much, this stuff happens literally all the time over in emulation projects where the builds can come out really fast, which doesn't give the heuristic network enough time and training to realize that they arent malicious
from whynotwin11.
Google chrome and Edge uses Chromium code base. File types that are mostly blocked are listed here https://source.chromium.org/chromium/chromium/src/+/main:components/safe_browsing/core/resources/download_file_types.asciipb
defender smart screen blocks them based on Authenticode certificates and file hash allowed. You can create the below registry key to allow the file type downloadable without warning
**Execute the below code in PS ISE ****
$regpath="HKLM:\Software\Policies\Microsoft\Edge\ExemptDomainFileTypePairsFromFileTypeDownloadWarnings"
if (!(Test-Path $regpath)) {
New-Item -Path $regpath -Force
}
New-ItemProperty -Path $regpath -Name "1" -Value '{"domains": ["*"], "file_extension": "exe"}' -PropertyType String -Force
from whynotwin11.
Can be closed now.
from whynotwin11.
Related Issues (20)
- Missing check on Developer Mode
- Update the supported processors HOT 4
- Updated Slovenian translation for WhyNotWin11 version 2.5.0.4
- Show if system drive is SSD or HDD HOT 1
- WhyNotWin12? HOT 1
- Update supported processor lists (article date: 2023/05/25) HOT 1
- Account for EFI partition size
- Command-Line HOT 2
- Getting not eligible for 30 days message with all results green HOT 4
- Missing Company Name in WhyNotWin11.exe Digital Certificate Causes Issue with Software Updater HOT 3
- Windows Security detects trojan HOT 4
- Add POPCNT CPU instruction check for Windows 11 Version 24H2. HOT 1
- List of Threadrippers incomplete? HOT 5
- GUI issues / improvemnts HOT 1
- Please add support for new supported Intel CPU's HOT 5
- security.txt : current date above Expires HOT 1
- small improvement to storage check HOT 6
- Host Name is Blank HOT 5
- Resolved : Add Current OS Build to file export HOT 5
- WinPE and Skip Parameter returns 1 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from whynotwin11.