News for hackers. Stuff that matters.

A comment on Reclaim Windows10. Parent comment

Re:Reclaim Windows10 by e3bc54b2 on Tuesday June 01, 2021 @11:53AM (#27356470)
Yes, and original comment addresses that. In theory WinMerge binary can contain malware. But WinMerge authors have a proven track record against that and they are transparent about working of their application enough through their source. MS and Smartscreen do not have that track record, and IMO have an opposite kind of record with all kind of map/adware practices throughout the system and applications.

So if an untrusted source tells me that a usually varifuably trustable source is not to be trusted, whom do I trust more?

[ Parent | on HN ]
Re:Reclaim Windows10 by cptskippy on Tuesday June 01, 2021 @04:24PM (#27360785)
> So if an untrusted source tells me that a usually varifuably trustable source is not to be trusted, whom do I trust more?

I honestly don't understand how you've made this an adversarial situation. It's almost as if you take offense to Smartscreen telling you it doesn't trust your binary.

The system is pretty straight forward, Smartscreen checks the file source against a list of known bad actors. If there's a hit it's saying "I can't vouch for this".

I checked and WinMerge isn't flagged in Smartscreen. The publisher however does not use a signing certificate which results in a UAC prompt.

In any case neither of these features prevent installation, they're just warnings you can circumvent.

[ Parent | on HN ]
Re:Reclaim Windows10 by fomine3 on Wednesday June 02, 2021 @04:05AM (#27366159)
If you don't trust SmartScreen, you'll also don't trust Windows, so using Windows is the problem rather than SmartScreen.
[ Parent | on HN ]