News for hackers. Stuff that matters.

A comment on Notepad++ drops code signing for its releases. Parent comment

Re:Notepad++ drops code signing for its releases by cwyers on Thursday March 07, 2019 @04:28PM (#19332659)
I mean, if someone is going to commit a crime, forcing them to leave a paper trail is going to scare at least some of them off. And if I'm installing Adobe Photoshop, and the cert comes from Bob's Software Emporium, Delaware, it raises questions.
[ Parent | on HN ]
Re:Notepad++ drops code signing for its releases by Godel_unicode on Friday March 08, 2019 @11:39AM (#19339165)
Is that actually true? How many people, when installing Photoshop, actually look at who issued the cert?
[ Parent | on HN ]
Re:Notepad++ drops code signing for its releases by cwyers on Friday March 08, 2019 @11:55AM (#19339321)
In Windows, the name of the publisher in the cert shows up on the UAC prompt whenever the program asks for elevated privileges. That's the point of this whole thread -- the author isn't paying for a cert because he can't make the UAC prompt say Notepad++ instead of his real name (which, he could, and I have no idea why he thinks it's so complicated, but there it is).
[ Parent | on HN ]
Re:Notepad++ drops code signing for its releases by Godel_unicode on Friday March 08, 2019 @04:00PM (#19342119)
That doesn't have anything to do with the question I asked. See also, TLS exceptions.
[ Parent | on HN ]