3 ms·

When clicking that link in Chrome I get a "The site ahead contains harmful programs" warning page with a bright red background. "Attackers on github.com might

When clicking that link in Chrome I get a "The site ahead contains harmful programs" warning page with a bright red background. "Attackers on github.com might attempt to trick you into installing programs that harm your browsing experience (for example, by changing your homepage or showing extra ads on sites you visit)." How strange... I don't get it for other github pages.

userbinator 5y ago
From that page: N.B. A few antivirus programs incorrectly flag Policy Plus as malware. Policy Plus is a powerful tool and so may cause problems if used recklessly, but it is not malicious. No so much different than "hacking tools" or similar being detected as "malware". In other words, just another example of the paranoia typical of the authoritarianism that is so common in the software industry today.
- ASalazarMX 5y ago
  > In other words, just another example of the paranoia typical of the authoritarianism that is so common in the software industry today I don't think it's authoritarian, just that the more positives your antivirus detects that others don't, the better you can sell it. Something like Process Hacker should have never been detected as malware, as it can't harm others, but it ups those numbers.
throwawaysea 5y ago
I get the same on Firefox as well, and this is the first time I've seen such a warning ever. I definitely don't get it for other github projects.
iudqnolq 5y ago
If chrome uses something like the public safe browsing blAPI malware checking is done with hashes of full urls
zinekeller 5y ago
Same here. Surprisingly, Microsoft* just allowed it, no problem. Edit: Also, Google doesn't trigger on https://github.com/Fleex255/PolicyPlus/ https://github.com/Fleex255/PolicyPlus/ (note the trailing slash) but reacts to https://github.com/Fleex255/PolicyPlus https://github.com/Fleex255/PolicyPlus (no trailing slash). Weird. VirusTotal summary page says that it is detected by five different engines: https://www.virustotal.com/gui/file/dca4ecd769253d3b4a165a5bbadbb7ce48aa89451b46eb05185f922e931da156/detection https://www.virustotal.com/gui/file/dca4ecd769253d3b4a165a5b... * Both Edge SmartScreen and Defender.
franga2000 5y ago
The same happens sometimes when trying to download netcat and almost always when downloading any of the SysInternals password recovery tools. Cybercriminals use these tools in attacks and so they must be malicious! You know, like bank robbers use hammers and cars...

userbinator 5y ago

From that page: N.B. A few antivirus programs incorrectly flag Policy Plus as malware. Policy Plus is a powerful tool and so may cause problems if used recklessly, but it is not malicious. No so much different than "hacking tools" or similar being detected as "malware". In other words, just another example of the paranoia typical of the authoritarianism that is so common in the software industry today.

ASalazarMX 5y ago
> In other words, just another example of the paranoia typical of the authoritarianism that is so common in the software industry today I don't think it's authoritarian, just that the more positives your antivirus detects that others don't, the better you can sell it. Something like Process Hacker should have never been detected as malware, as it can't harm others, but it ups those numbers.

throwawaysea 5y ago

I get the same on Firefox as well, and this is the first time I've seen such a warning ever. I definitely don't get it for other github projects.

iudqnolq 5y ago

If chrome uses something like the public safe browsing blAPI malware checking is done with hashes of full urls

zinekeller 5y ago

Same here. Surprisingly, Microsoft* just allowed it, no problem. Edit: Also, Google doesn't trigger on https://github.com/Fleex255/PolicyPlus/ https://github.com/Fleex255/PolicyPlus/ (note the trailing slash) but reacts to https://github.com/Fleex255/PolicyPlus https://github.com/Fleex255/PolicyPlus (no trailing slash). Weird. VirusTotal summary page says that it is detected by five different engines: https://www.virustotal.com/gui/file/dca4ecd769253d3b4a165a5bbadbb7ce48aa89451b46eb05185f922e931da156/detection https://www.virustotal.com/gui/file/dca4ecd769253d3b4a165a5b... * Both Edge SmartScreen and Defender.

franga2000 5y ago

The same happens sometimes when trying to download netcat and almost always when downloading any of the SysInternals password recovery tools. Cybercriminals use these tools in attacks and so they must be malicious! You know, like bank robbers use hammers and cars...