News for hackers. Stuff that matters.

A comment on Codehash.db – A public database for software and firmware hashes. Parent comment

Re:Codehash.db – A public database for software and firmware... by j_s on Friday November 11, 2016 @11:28PM (#12936601)
Is there any accommodation for the per-user downloads implemented by Chrome, Dropbox, etc. (each with their own ways of sneaking around Authenticode verification)?

https://textslashplain.com/2016/05/13/cheating-authenticode-...

[ Parent | on HN ]
Re:Codehash.db – A public database for software and firmware... by gruez on Saturday November 12, 2016 @10:12AM (#12938173)
Why would they even do that? After you get a signing certificate, you can sign as many times as you want, so it's not like they're saving any money.
[ Parent | on HN ]
Re:Codehash.db – A public database for software and firmware... by quicklyfrozen on Saturday November 12, 2016 @12:54PM (#12939085)
Even if the installer is signed, Windows and/or your AV will warn you if it's a package that hasn't been downloaded by many other users.
[ Parent | on HN ]