11 ms·
How does Windows check executables? I hope they don't do the same. Does it come with a master list of public keys from manufacturers to check the signature agai
by raxxorrax 6y ago
How does Windows check executables? I hope they don't do the same. Does it come with a master list of public keys from manufacturers to check the signature against?
How does that work for new vendors?
- satysin 6y agoMicrosoft SmartScreen is very similar to Apple's approach. Although I believe you can disable SmartScreen on Windows still which, afaik, you cannot do on macOS without resorting to "hacks" such as editing the hosts file to loopback the Apple OCSP server. https://en.wikipedia.org/wiki/Microsoft_SmartScreen https://en.wikipedia.org/wiki/Microsoft_SmartScreen
- minot 6y agoGood thing too because it is easy to screw up signing. For example, even the dotnet team has trouble with it https://github.com/dotnet/core/issues/5202 https://github.com/dotnet/core/issues/5202
- ameyab 6y agoExactly. The policy applies to everyone. Unsigned new binaries (executables) on the internet are not to be trusted by the general public.
- raxxorrax 6y agoUnfortunately Microsoft is that predictable that it is safe to say they already think about removing the option to disable it. Another reason not to use an MS account. I think this is a plain data leak and arguably worse than a trojan can do to your system in context of modern banking security measures. Also I doubt most users are aware that MS gets info on every app you run.
- layoutIfNeeded 6y ago>Does it come with a master list of public keys from manufacturers to check the signature against? That won't handle revocations.
- beervirus 6y agoIt will if you update it frequently.
- deleted 6y ago[deleted]
- viro 6y ago...Do people not know AV's randomly upload files to the cloud to be analyzed?