News for hackers. Stuff that matters.

A comment on Notepad++ drops code signing for its releases. Parent comment

Re:Notepad++ drops code signing for its releases by ex3ndr on Thursday March 07, 2019 @01:18PM (#19330547)
This certificate doesn't help to bypass UAC and "unsecure" prompt still be shown to the user.
[ Parent | on HN ]
Re:Notepad++ drops code signing for its releases by gruez on Thursday March 07, 2019 @01:50PM (#19330901)
That's incorrect. All code authenticode signing certificates (trusted by microsoft) turns the UAC prompt from yellow to blue. EV certificates is probably for auto-trust for smartscreen.
[ Parent | on HN ]
Re:Notepad++ drops code signing for its releases by Leace on Thursday March 07, 2019 @02:24PM (#19331258)
> EV certificates is probably for auto-trust for smartscreen.

Yes, that's correct. EV just skips the reputation building phase.

Source: https://blogs.msdn.microsoft.com/ie/2012/08/14/microsoft-sma...

> Programs signed by an EV code signing certificate can immediately establish reputation with SmartScreen reputation services even if no prior reputation exists for that file or publisher.

[ Parent | on HN ]
Re:Notepad++ drops code signing for its releases by ex3ndr on Thursday March 07, 2019 @03:33PM (#19332052)
Only after you noticed that UAC color is blue instead of yellow i started to see difference.

No user will understand this though.

[ Parent | on HN ]
Re:Notepad++ drops code signing for its releases by Marsymars on Thursday March 07, 2019 @04:46PM (#19332828)
Up until reading this thread I wasn't even aware that there were different UAC colours.
[ Parent | on HN ]