3 ms·
That kind of defeatism isn’t helpful. The present case also just seems malware easily detected by VirusTotal: https://old.reddit.com/r/xubuntu/comments/1oa43gt
by layer8 1y ago
That kind of defeatism isn’t helpful.
The present case also just seems malware easily detected by VirusTotal: https://old.reddit.com/r/xubuntu/comments/1oa43gt/xubuntuorg_might_be_compromised/nk6r7tu/ https://old.reddit.com/r/xubuntu/comments/1oa43gt/xubuntuorg...
- amelius 1y agoSticking-your-head-in-the-sand-ism isn't helpful either. But nobody wants to talk about true security. For example, why does a Python module that renders progress bars (for example) need my full trust about what it does to the rest of my system? Etc.
- deleted 1y ago[deleted]
- brookst 1y agoWhat's the term for the fallacy that this problem can be ignored because that problem is so much worse? Sorry, patient, why are we talking about setting your broken arm when you are genetically predisposed to cancer that's going to kill you anyway?
- zahlman 1y ago> why does a Python module that renders progress bars (for example) need my full trust about what it does to the rest of my system? tqdm is pure Python and available as a wheel. Or is this a general complaint about sandboxing others' code at runtime?
- amelius 1y agoGeneral complaint. Has nothing to do with tqdm.
- chorlton2080 1y agoLook at all the mainstream scanners that failed to detect it!
- layer8 1y agoThat’s pretty normal in my experience. That’s why you check with VirusTotal instead of a single “mainstream” scanner.
- rs186 1y agoIn reality, if Microsoft Defender (Security or whatever the name is) can detect it (which does in this case), it means it is flagged on most target users' machine. Of course, there are people who disable built-in security scanning and don't use another antivirus software, and that's on them.
- account42 1y agoUnfortunately Defender also flags lots of non-malware open source software, which trains users to ignore it.
- rs186 1y agoExample? Personally I have not run into a single such false positive for the past 10 years. Microsoft SmartScreen sometimes shows a warning for executables that are not digitally signed, but that's not Defender, and this is nowhere like flagging as a virus.
- akimbostrawman 1y agoqBittorrent which is a reputable and popular torrent client used to download linux isos, gets flagged and removed as "potentially unwanted applications" by windows defender.