Thanks for confirming Tim. Please file the bug report as requested before. We can then take a closer look.
Thanks, Dani From: Tim Webb <t...@genuitec.com> To: "Eclipse platform general developers list." <platform-dev@eclipse.org> Date: 19.06.2019 14:37 Subject: [EXTERNAL] Re: [platform-dev] Impact of Windows Defender and Eclipse startup Sent by: platform-dev-boun...@eclipse.org I can confirm that the issue is with a signed EXE -- I've also reproduced with versions randomly from Oxygen to 2019-06 including different Java versions. I agree that this is not an "Eclipse bug" per se but instead a platform issue of Eclipse and Windows Defender. Right now this seems to impact any Eclipse-based install, mainly blocking access to Jars on the first read. Eclipse is slowly running as Jars are started. The same hang can happen later when Eclipse is running if a bunch of plugins are accessed by some UI action. Note that as has been mentioned, if you use a separate anti-virus program, normally they seem to disable Windows Defender and you don't suffer this problem. On Tue, Jun 18, 2019 at 7:21 PM Daniel Megert <daniel_meg...@ch.ibm.com> wrote: > Note: the exe file from plain SDK *is* signed Correct, and so are the executables of the EPPs and the installer itself. Tim, the original reporter of the issue, said: " 0:05 - time to extract 354mb JEE 2019-06 RC1 zip 1:28 - time spent by Windows Defender before Eclipse workspace prompt " which indicates to me that he used an EPP. Tim, please object if that's not the case. I verified that package (eclipse-jee-2019-06-RC1-win32-x86_64.zip - size 354 MB) and also tried a random package from RC 2 (20190613-1013_eclipse-java-2019-06-RC2-win32.win32.x86_64.zip). Both are signed. So, while the missing signing in the p2 repository is not good, it is not causing the Windows Defender issue as reported originally. Tim, I suggest you file a bug report with steps to reproduce and all details like, which Java version, Windows version and Windows Defender version. Some time ago https://bugs.eclipse.org/516795got reported regarding Windows Defender. Comments there indicate that it's a deeper issue with/in Windows Defender and not related to the eclipse.exe (issue happens after eclipse.exe is done). Dani From: Andrey Loskutov <losku...@gmx.de> To: platform-dev@eclipse.org Date: 18.06.2019 17:22 Subject: [EXTERNAL] Re: [platform-dev] Impact of Windows Defender and Eclipse startup Sent by: platform-dev-boun...@eclipse.org Whoever is interested in solving this problem, please create a p2 or oomph bug for that. I think missing signature on Windows is not OK, independently if this helps or not with the Windows Defender performance. Note: the exe file from plain SDK *is* signed. On 18.06.2019 16:52, Ed Merks wrote: > Rolf, > > Indeed if I look at the two executables in the following: > > https://download.eclipse.org/eclipse/updates/4.12/R-4.12-201906051800/binary/org.eclipse.platform.sdk.executable.win32.win32.x86_64_4.12.0.I20190605-1800 > > They do not show signature properties when extracted, so p2 installing > these (p2 director via the installer or via p2 update) would not produce > something with a signature in would appear. > > I would have expected this file to contain two signed executables, but > that appears, as you suggest, not to be the case. :-( > > I asked Dani just now, and he also expected these would be signed... > > > On 18.06.2019 16:13, Rolf Theunissen wrote: >> >> First of all, the properties of the executable show it very clearly. >> >> Second, https://bugs.eclipse.org/bugs/show_bug.cgi?id=509799#c4this >> comment. >> >> eclipse.exe properties from Eclipse IDE for Java Developers Package >> >> Eclipse properties for product installed via oomph. >> >> Op 6/18/2019 om 4:04 PM schreef Ed Merks: >>> >>> Rolf, >>> >>> I don't believe what you suggest is the case. The eclipse.exe in the >>> p2 repository, like all the artifacts in the repository, is >>> signed. Otherwise, if one did an update and the executable needed >>> to be updated, it would be updated with an unsigned version, which >>> would not be acceptable. What makes you think/assume that these are >>> not signed? >>> >>> >>> On 18.06.2019 15:56, Rolf Theunissen wrote: >>>> >>>> Hi, >>>> >>>> I came across the bug below. What triggered me from the comments on >>>> Bug 509799 is, that the 'eclipse.exe' is apparently signed as part >>>> of the EPP build. As we are pushing Eclipse-Installer now, many >>>> installations contain a 'eclipse.exe' that is not signed. >>>> >>>> So maybe the problem is not how to let Microsoft trust the Eclipse >>>> Signature, but more how to *ensure that the 'eclipse.exe' is signed >>>> on all installations*. >>>> >>>> *Bug 539954* <https://bugs.eclipse.org/bugs/show_bug.cgi?id=539954> >>>> - eclipse installer "SimRel 2018?09" from ibm cloud is reported as >>>> virus infected >>>> *Bug 509799* <https://bugs.eclipse.org/bugs/show_bug.cgi?id=509799> >>>> - Symantec reports a Trojan SONAR.AM.C!g24 in eclipse >>>> *Bug 485899* <https://bugs.eclipse.org/bugs/show_bug.cgi?id=485899> >>>> - upgrading eclipse causes anti-virus to alert >>>> >>>> Rolf -- Kind regards, Andrey Loskutov https://www.eclipse.org/user/aloskutov --------------------------------------------- ???????? ????????? - ???? ??? ????? ????????? --------------------------------------------- _______________________________________________ platform-dev mailing list platform-dev@eclipse.org To change your delivery options, retrieve your password, or unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/platform-dev _______________________________________________ platform-dev mailing list platform-dev@eclipse.org To change your delivery options, retrieve your password, or unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/platform-dev -- Cheers, Tim Timothy R. Webb Vice President, Operations Genuitec, LLC, follow @timrwebb or connect at linkedin.com/in/trwebb _______________________________________________ platform-dev mailing list platform-dev@eclipse.org To change your delivery options, retrieve your password, or unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/platform-dev
_______________________________________________ platform-dev mailing list platform-dev@eclipse.org To change your delivery options, retrieve your password, or unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/platform-dev
