Cruisers Forum
 


Join CruisersForum Today

Reply
 
Thread Tools Search this Thread Rate Thread Display Modes
Old 14-10-2014, 01:25   #1
bcn
Registered User

Join Date: May 2011
Location: underway whenever possible
Boat: Rangeboat 39
Posts: 3,497
S63, Fingerprints and false virus checker alerts

In the last days we received reports from users that under Windows their anti-virus blocks the download and/or execution of the fingerprint executable identifying it as a "generic trojan".
This is a false positive. Dot.
From the sparse information we have found this false positive is triggered by the fact that the fingerprinted is generating a file when running: exactly what it has to do...

What can we do? What can you do?

- change something in the executable and compile it again.
We won't do that. First one would implicitly admit that something is wrong with the file. Secondly as the alert is most probably driven by heuristics or behavioral analysis we would have the same issue three days later again.

- We tried to contact the anti-virus manufacturer but they just ignore us as we are not customers of theirs. And we will not buy such a product just in order to be able to report a fault to them.

- So we ask you: if you have that issue, please report a "false positive" back to the manufacturer of your anti-virus program

- If you can't download the executable because it gets blocked, drop us a mail and we will send a zipped version with a different extension.

- To execute the fingerprinted you will most probably have to stop your anti-virus program for that instant.

Welcome to the Windows world :bang head:

And thank you for your patience!

Hubert & o-charts.org
__________________

bcn is online now   Reply With Quote
Old 16-10-2014, 04:23   #2
Registered User
 
Gilletarom's Avatar

Join Date: Mar 2010
Location: France
Boat: 10.50 mètres
Posts: 2,648
Re: S63, Fingerprints and false virus checker alerts

Hello Dave, Hello Hubert,

Hum ..... I see from reading your post, some anger. I can understand you.

That said, if you can not get your software is no longer analyzed as containing malware, it will be quite difficult, and even impossible, to obtain the trust of users.

Which can be accepted by beta testers, with confidence you will not be accepted by the user "alpha". Ask them not to trust their anti-virus software, is not reasonable.

And how the editors of websites, defending OpenCPN, will it themselves if they want to retain the trust of their readers?

We are facing a particularly difficult situation to manage.

It is hoped that a good solution will be found.


Best regards. Gilletarom.
__________________

Gilletarom is offline   Reply With Quote
Old 16-10-2014, 04:52   #3
Registered User

Join Date: Jul 2010
Location: Kalamata, Greece
Boat: Amel Sharki
Posts: 1,984
Re: S63, Fingerprints and false virus checker alerts

Gilletrom,
it is not new that anti-virus software often makes false alarms and this often with well-known software. There are several such examples on the internet. After all it is the wonderful world of Windows where even a good anti-virus software has not found malware for years. So both cases are possible.
Never trust anybody...
Gerhard
CarCode is offline   Reply With Quote
Old 16-10-2014, 05:02   #4
bcn
Registered User

Join Date: May 2011
Location: underway whenever possible
Boat: Rangeboat 39
Posts: 3,497
Re: S63, Fingerprints and false virus checker alerts

For me the only "solution" is the one I've posted:

- So we ask you: if you have that issue, please report a "false positive" back to the manufacturer of your anti-virus program

The rest is fighting against wind mills

Hubert
bcn is online now   Reply With Quote
Old 16-10-2014, 05:03   #5
Registered User
 
Gilletarom's Avatar

Join Date: Mar 2010
Location: France
Boat: 10.50 mètres
Posts: 2,648
Re: S63, Fingerprints and false virus checker alerts

hello Gerhard,

Quote:
Originally Posted by CarCode View Post
Gilletrom,
..... So both cases are possible.
Never trust anybody...
Gerhard
Here's a sentence in both directions .... Which will have the confidence of users ... O-Charts or anti virus software ....

It's "heads or tails"

Gilletarom.
Gilletarom is offline   Reply With Quote
Old 16-10-2014, 05:08   #6
bcn
Registered User

Join Date: May 2011
Location: underway whenever possible
Boat: Rangeboat 39
Posts: 3,497
Re: S63, Fingerprints and false virus checker alerts

So just argue why one would put a trojan on it's own web site with full address and so on...
It just does not make sense.

We are not Google Inc.
bcn is online now   Reply With Quote
Old 22-10-2014, 06:36   #7
Registered User

Join Date: Jun 2010
Location: St. Petersburg, Florida
Boat: Gemini 3200
Posts: 804
Re: S63, Fingerprints and false virus checker alerts

Quote:
Originally Posted by Gilletarom View Post
hello Gerhard,



Here's a sentence in both directions .... Which will have the confidence of users ... O-Charts or anti virus software ....

It's "heads or tails"

Gilletarom.
I can't speak for others but I am considerably more confident in OpenCPN than many of the anti-virus programs on the market.

Fabbian
fgd3 is offline   Reply With Quote
Old 22-10-2014, 08:03   #8
Registered User

Join Date: Jul 2010
Location: Kalamata, Greece
Boat: Amel Sharki
Posts: 1,984
Re: S63, Fingerprints and false virus checker alerts

Quote:
Originally Posted by fgd3 View Post
I can't speak for others but I am considerably more confident in OpenCPN than many of the anti-virus programs on the market.

Fabbian
Correct, the ones works hard to get money from their users no matter which way while the OpenCPN people perhaps only wants to get back their investments.
However it is always possible some hacker injected an otherwise clean website...
Gerhard
CarCode is offline   Reply With Quote
Old 22-10-2014, 09:30   #9
bcn
Registered User

Join Date: May 2011
Location: underway whenever possible
Boat: Rangeboat 39
Posts: 3,497
Re: S63, Fingerprints and false virus checker alerts

Quote:
Originally Posted by CarCode View Post
However it is always possible some hacker injected an otherwise clean website...
Gerhard
That's why we added the MD5 check sum - and this one we are comparing with the file compiled on the standard Microsoft environment on a system well separated from the o-charts site where the copy for download lives.
The upload is done from a third system with a different OS.

But such is life ......
bcn is online now   Reply With Quote
Old 22-10-2014, 10:00   #10
Registered User

Join Date: Jul 2010
Location: Kalamata, Greece
Boat: Amel Sharki
Posts: 1,984
Re: S63, Fingerprints and false virus checker alerts

Hubert,
huh, you shouldn't have mentioned Microsoft. It's the first source of all devil work...
Gerhard
CarCode is offline   Reply With Quote
Old 22-10-2014, 10:31   #11
Registered User

Join Date: Jul 2010
Location: Kalamata, Greece
Boat: Amel Sharki
Posts: 1,984
Re: S63, Fingerprints and false virus checker alerts

Addendum:
Hubert, please read here:
Zero-Day-Lücke in Windows | heise online
Gerhard
CarCode is offline   Reply With Quote
Old 22-10-2014, 11:06   #12
bcn
Registered User

Join Date: May 2011
Location: underway whenever possible
Boat: Rangeboat 39
Posts: 3,497
Re: S63, Fingerprints and false virus checker alerts

Well, that remembers me about a message from the same magazine some days ago:
"Several Thousands of MACs infected by iWorm"
iWorm infiziert tausende Macs | Mac & i

And Apple is not known to be very agile regarding security issues.....

If there are sufficient users, there are crooks - see Android
bcn is online now   Reply With Quote
Old 23-10-2014, 04:50   #13
Registered User
 
rgleason's Avatar

Join Date: Mar 2012
Location: Boston, MA
Boat: 1981 Bristol 32 Sloop
Posts: 13,412
Re: S63, Fingerprints and false virus checker alerts

In compiling for windows I used to have Norton 360 issue dire warnings and delete the file I had just compiled because it was "unknown and not used by many people". It was one or two files in climatology. The solution was to override Norton and reverse the deletion. Eventually I had done it so many times Norton gave up or I made an exception. One day soon I will get rid of this piggy app and get mcaffee when the subscription runs out. Others have said Norton is bad but I knoe nothing else since 1985.

Sent from my GT-N5110 using Cruisers Sailing Forum mobile app
rgleason is offline   Reply With Quote
Old 23-10-2014, 07:15   #14
bcn
Registered User

Join Date: May 2011
Location: underway whenever possible
Boat: Rangeboat 39
Posts: 3,497
Re: S63, Fingerprints and false virus checker alerts

seems that others - Adobe in this case - have sometimes problems with the virus checkers as well:
Attached Thumbnails
Click image for larger version

Name:	2014-10-23 16_09_17-Adobe - Adobe Reader, free PDF viewer download.png
Views:	88
Size:	12.2 KB
ID:	90173  
__________________

bcn is online now   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
S63 PlugIn Version 1.0 Released bdbcat OpenCPN 26 01-11-2018 10:07
Convert s63/s57 to raster Storkur OpenCPN 17 18-09-2014 12:12
Git build, problems with plugins (s63, climatology) jfburkhart OpenCPN 1 18-07-2014 23:49
Open CPN - ROT & S63 charts Quidnunc OpenCPN 9 13-05-2013 18:16
S63 User Permits BjarneK Navigation 3 24-01-2012 18:21



Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -7. The time now is 14:41.


Google+
Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2019, vBulletin Solutions, Inc.
Social Knowledge Networks
Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2019, vBulletin Solutions, Inc.

ShowCase vBulletin Plugins by Drive Thru Online, Inc.