3 ms·
Alternative explanation: there's no central whitelist, windows just checks to make sure that the internal checksums all match up? (I don't know which is true,
by Shish2k 13y ago
Alternative explanation: there's no central whitelist, windows just checks to make sure that the internal checksums all match up?
(I don't know which is true, but if we're speculating, I imagine the latter would be more realistic than a huge checksum database bundled with the OS. Though maybe it's a small checksum database that only includes the personal favourite tools of the windows developers? :P )
- bcoates 13y agoI don't know how exhaustive the database is, but it looks like it just phones home to MS: http://news.softpedia.com/news/Windows-8-Secrets-the-Built-in-Security-Features-300963.shtml http://news.softpedia.com/news/Windows-8-Secrets-the-Built-i... (second screenshot). Might do the same "bloom filter plus server check for false positives" that browser malware filters use. Checking with a valid but extremely uncommon downloaded binary shows the same red banner (as well as a Chrome warning).