News for hackers. Stuff that matters.

hypersnatch_dev

hypersnatch_dev on Hacker News

Ask HN: Can hash verification replace EV code-signing on Windows?

Posted by hypersnatch_dev on Tuesday March 03, 2026 @04:09PM
from the ask-hn dept.

I ship an offline Windows tool and instead of paying for an EV certificate, I am experimenting with a detached verification model:1. User downloads the .exe from GitHub Releases 2. User downloads verify.ps1 (60-line PowerShell script, zero dependencies) 3. User runs: .\verify.ps1 .\MyApp-Setup.exeThe verifier computes SHA-256 and checks against a hardcoded manifest. No network calls. No...

( Read More... | 1 comment | on HN )
Re:Show HN: Offline desktop tool that extracts media endpoints from ra... on Monday March 02, 2026 @09:49PM (#47227338)
I've been building a Windows desktop tool that parses raw HTML locally and extracts embedded media endpoints.

It runs fully offline (no telemetry, no accounts) and can export structured results as CSV, JSON, or PDF with integrity hashes (SHA-256).

It was originally built for repeatable QA validation and archival workflows where deterministic results matter more than headless automation.

Architecture notes (for those interested): - Electron (sandboxed, context-isolated) - No use of eval() - Deterministic scoring of candidate endpoints - Optional CLI mode for batch processing

I'm mainly looking for feedback on: - Whether this is useful outside of QA / archival contexts - Expectations around cross-platform support - One-time license vs SaaS for a desktop utility