Cruisers Forum
 


Join CruisersForum Today

Reply
 
Thread Tools Rate Thread Display Modes
Old 14-10-2014, 02:25   #1
bcn
Registered User

Join Date: May 2011
Location: underway whenever possible
Boat: Rangeboat 39
Posts: 2,758
S63, Fingerprints and false virus checker alerts

In the last days we received reports from users that under Windows their anti-virus blocks the download and/or execution of the fingerprint executable identifying it as a "generic trojan".
This is a false positive. Dot.
From the sparse information we have found this false positive is triggered by the fact that the fingerprinted is generating a file when running: exactly what it has to do...

What can we do? What can you do?

- change something in the executable and compile it again.
We won't do that. First one would implicitly admit that something is wrong with the file. Secondly as the alert is most probably driven by heuristics or behavioral analysis we would have the same issue three days later again.

- We tried to contact the anti-virus manufacturer but they just ignore us as we are not customers of theirs. And we will not buy such a product just in order to be able to report a fault to them.

- So we ask you: if you have that issue, please report a "false positive" back to the manufacturer of your anti-virus program

- If you can't download the executable because it gets blocked, drop us a mail and we will send a zipped version with a different extension.

- To execute the fingerprinted you will most probably have to stop your anti-virus program for that instant.

Welcome to the Windows world :bang head:

And thank you for your patience!

Hubert & o-charts.org
__________________

__________________
bcn is online now   Reply With Quote
Old 16-10-2014, 05:23   #2
Registered User
 
Gilletarom's Avatar

Join Date: Mar 2010
Location: France
Boat: 10.50 mètres
Posts: 2,294
Re: S63, Fingerprints and false virus checker alerts

Hello Dave, Hello Hubert,

Hum ..... I see from reading your post, some anger. I can understand you.

That said, if you can not get your software is no longer analyzed as containing malware, it will be quite difficult, and even impossible, to obtain the trust of users.

Which can be accepted by beta testers, with confidence you will not be accepted by the user "alpha". Ask them not to trust their anti-virus software, is not reasonable.

And how the editors of websites, defending OpenCPN, will it themselves if they want to retain the trust of their readers?

We are facing a particularly difficult situation to manage.

It is hoped that a good solution will be found.


Best regards. Gilletarom.
__________________

__________________
Gilletarom is offline   Reply With Quote
Old 16-10-2014, 05:52   #3
Registered User

Join Date: Jul 2010
Location: Monastir, Tunisia
Boat: Amel Sharki
Posts: 1,774
Re: S63, Fingerprints and false virus checker alerts

Gilletrom,
it is not new that anti-virus software often makes false alarms and this often with well-known software. There are several such examples on the internet. After all it is the wonderful world of Windows where even a good anti-virus software has not found malware for years. So both cases are possible.
Never trust anybody...
Gerhard
__________________
CarCode is offline   Reply With Quote
Old 16-10-2014, 06:02   #4
bcn
Registered User

Join Date: May 2011
Location: underway whenever possible
Boat: Rangeboat 39
Posts: 2,758
Re: S63, Fingerprints and false virus checker alerts

For me the only "solution" is the one I've posted:

- So we ask you: if you have that issue, please report a "false positive" back to the manufacturer of your anti-virus program

The rest is fighting against wind mills

Hubert
__________________
bcn is online now   Reply With Quote
Old 16-10-2014, 06:03   #5
Registered User
 
Gilletarom's Avatar

Join Date: Mar 2010
Location: France
Boat: 10.50 mètres
Posts: 2,294
Re: S63, Fingerprints and false virus checker alerts

hello Gerhard,

Quote:
Originally Posted by CarCode View Post
Gilletrom,
..... So both cases are possible.
Never trust anybody...
Gerhard
Here's a sentence in both directions .... Which will have the confidence of users ... O-Charts or anti virus software ....

It's "heads or tails"

Gilletarom.
__________________
Gilletarom is offline   Reply With Quote
Old 16-10-2014, 06:08   #6
bcn
Registered User

Join Date: May 2011
Location: underway whenever possible
Boat: Rangeboat 39
Posts: 2,758
Re: S63, Fingerprints and false virus checker alerts

So just argue why one would put a trojan on it's own web site with full address and so on...
It just does not make sense.

We are not Google Inc.
__________________
bcn is online now   Reply With Quote
Old 22-10-2014, 07:36   #7
Registered User

Join Date: Jun 2010
Location: St. Petersburg, Florida
Boat: Gemini 3200
Posts: 702
Re: S63, Fingerprints and false virus checker alerts

Quote:
Originally Posted by Gilletarom View Post
hello Gerhard,



Here's a sentence in both directions .... Which will have the confidence of users ... O-Charts or anti virus software ....

It's "heads or tails"

Gilletarom.
I can't speak for others but I am considerably more confident in OpenCPN than many of the anti-virus programs on the market.

Fabbian
__________________
fgd3 is offline   Reply With Quote
Old 22-10-2014, 09:03   #8
Registered User

Join Date: Jul 2010
Location: Monastir, Tunisia
Boat: Amel Sharki
Posts: 1,774
Re: S63, Fingerprints and false virus checker alerts

Quote:
Originally Posted by fgd3 View Post
I can't speak for others but I am considerably more confident in OpenCPN than many of the anti-virus programs on the market.

Fabbian
Correct, the ones works hard to get money from their users no matter which way while the OpenCPN people perhaps only wants to get back their investments.
However it is always possible some hacker injected an otherwise clean website...
Gerhard
__________________
CarCode is offline   Reply With Quote
Old 22-10-2014, 10:30   #9
bcn
Registered User

Join Date: May 2011
Location: underway whenever possible
Boat: Rangeboat 39
Posts: 2,758
Re: S63, Fingerprints and false virus checker alerts

Quote:
Originally Posted by CarCode View Post
However it is always possible some hacker injected an otherwise clean website...
Gerhard
That's why we added the MD5 check sum - and this one we are comparing with the file compiled on the standard Microsoft environment on a system well separated from the o-charts site where the copy for download lives.
The upload is done from a third system with a different OS.

But such is life ......
__________________
bcn is online now   Reply With Quote
Old 22-10-2014, 11:00   #10
Registered User

Join Date: Jul 2010
Location: Monastir, Tunisia
Boat: Amel Sharki
Posts: 1,774
Re: S63, Fingerprints and false virus checker alerts

Hubert,
huh, you shouldn't have mentioned Microsoft. It's the first source of all devil work...
Gerhard
__________________
CarCode is offline   Reply With Quote
Old 22-10-2014, 11:31   #11
Registered User

Join Date: Jul 2010
Location: Monastir, Tunisia
Boat: Amel Sharki
Posts: 1,774
Re: S63, Fingerprints and false virus checker alerts

Addendum:
Hubert, please read here:
Zero-Day-Lücke in Windows | heise online
Gerhard
__________________
CarCode is offline   Reply With Quote
Old 22-10-2014, 12:06   #12
bcn
Registered User

Join Date: May 2011
Location: underway whenever possible
Boat: Rangeboat 39
Posts: 2,758
Re: S63, Fingerprints and false virus checker alerts

Well, that remembers me about a message from the same magazine some days ago:
"Several Thousands of MACs infected by iWorm"
iWorm infiziert tausende Macs | Mac & i

And Apple is not known to be very agile regarding security issues.....

If there are sufficient users, there are crooks - see Android
__________________
bcn is online now   Reply With Quote
Old 23-10-2014, 05:50   #13
Registered User
 
rgleason's Avatar

Join Date: Mar 2012
Location: Boston, MA
Boat: 1981 Bristol 32 Sloop
Posts: 9,369
Re: S63, Fingerprints and false virus checker alerts

In compiling for windows I used to have Norton 360 issue dire warnings and delete the file I had just compiled because it was "unknown and not used by many people". It was one or two files in climatology. The solution was to override Norton and reverse the deletion. Eventually I had done it so many times Norton gave up or I made an exception. One day soon I will get rid of this piggy app and get mcaffee when the subscription runs out. Others have said Norton is bad but I knoe nothing else since 1985.

Sent from my GT-N5110 using Cruisers Sailing Forum mobile app
__________________
rgleason is offline   Reply With Quote
Old 23-10-2014, 08:15   #14
bcn
Registered User

Join Date: May 2011
Location: underway whenever possible
Boat: Rangeboat 39
Posts: 2,758
Re: S63, Fingerprints and false virus checker alerts

seems that others - Adobe in this case - have sometimes problems with the virus checkers as well:
Attached Thumbnails
Click image for larger version

Name:	2014-10-23 16_09_17-Adobe - Adobe Reader, free PDF viewer download.png
Views:	74
Size:	12.2 KB
ID:	90173  
__________________

__________________
bcn is online now   Reply With Quote
Reply

Thread Tools
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
S63 PlugIn Version 1.0 Released bdbcat OpenCPN 19 10-07-2015 15:04
Convert s63/s57 to raster Storkur OpenCPN 17 18-09-2014 13:12
Git build, problems with plugins (s63, climatology) jfburkhart OpenCPN 1 19-07-2014 00:49
Open CPN - ROT & S63 charts Quidnunc OpenCPN 9 13-05-2013 19:16
S63 User Permits BjarneK Navigation 3 24-01-2012 19:21



Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -7. The time now is 03:46.


Google+
Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Social Knowledge Networks
Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.

ShowCase vBulletin Plugins by Drive Thru Online, Inc.