Done. https://bugs.eclipse.org/bugs/show_bug.cgi?id=548443
On Wed, Jun 19, 2019 at 9:46 AM Daniel Megert <daniel_meg...@ch.ibm.com> wrote: > Thanks for confirming Tim. Please file the bug report as requested before. > We can then take a closer look. > > Thanks, > Dani > > > > From: Tim Webb <t...@genuitec.com> > To: "Eclipse platform general developers list." < > platform-dev@eclipse.org> > Date: 19.06.2019 14:37 > Subject: [EXTERNAL] Re: [platform-dev] Impact of Windows Defender > and Eclipse startup > Sent by: platform-dev-boun...@eclipse.org > ------------------------------ > > > > I can confirm that the issue is with a signed EXE -- I've also reproduced > with versions randomly from Oxygen to 2019-06 including different Java > versions. I agree that this is not an "Eclipse bug" per se but instead a > platform issue of Eclipse and Windows Defender. Right now this seems to > impact any Eclipse-based install, mainly blocking access to Jars on the > first read. Eclipse is *slowly *running as Jars are started. The same > hang can happen later when Eclipse is running if a bunch of plugins are > accessed by some UI action. > > Note that as has been mentioned, if you use a separate anti-virus program, > normally they seem to disable Windows Defender and you don't suffer this > problem. > > On Tue, Jun 18, 2019 at 7:21 PM Daniel Megert <*daniel_meg...@ch.ibm.com* > <daniel_meg...@ch.ibm.com>> wrote: > > Note: the exe file from plain SDK *is* signed > > Correct, and so are the executables of the EPPs and the installer itself. > > Tim, the original reporter of the issue, said: > " > 0:05 - time to extract 354mb JEE 2019-06 RC1 zip > 1:28 - time spent by Windows Defender before Eclipse workspace prompt > " > which indicates to me that he used an EPP. Tim, please object if that's > not the case. I verified that package > (eclipse-jee-2019-06-RC1-win32-x86_64.zip - size 354 MB) and also tried a > random package from RC 2 > (20190613-1013_eclipse-java-2019-06-RC2-win32.win32.x86_64.zip). Both are > signed. > > So, while the missing signing in the p2 repository is not good, it is not > causing the Windows Defender issue as reported originally. > > Tim, I suggest you file a bug report with steps to reproduce and all > details like, which Java version, Windows version and Windows Defender > version. > > Some time ago *https://bugs.eclipse.org/516795* > <https://bugs.eclipse.org/516795>got reported regarding Windows Defender. > Comments there indicate that it's a deeper issue with/in Windows Defender > and not related to the eclipse.exe (issue happens after eclipse.exe is > done). > > Dani > > > > From: Andrey Loskutov <*losku...@gmx.de* <losku...@gmx.de>> > To: *platform-dev@eclipse.org* <platform-dev@eclipse.org> > Date: 18.06.2019 17:22 > Subject: [EXTERNAL] Re: [platform-dev] Impact of Windows Defender > and Eclipse startup > Sent by: *platform-dev-boun...@eclipse.org* > <platform-dev-boun...@eclipse.org> > ------------------------------ > > > > Whoever is interested in solving this problem, please create a p2 or > oomph bug for that. > > I think missing signature on Windows is not OK, independently if this > helps or not with the Windows Defender performance. Note: the exe file > from plain SDK *is* signed. > > On 18.06.2019 16:52, Ed Merks wrote: > > Rolf, > > > > Indeed if I look at the two executables in the following: > > > > > *https://download.eclipse.org/eclipse/updates/4.12/R-4.12-201906051800/binary/org.eclipse.platform.sdk.executable.win32.win32.x86_64_4.12.0.I20190605-1800* > <https://download.eclipse.org/eclipse/updates/4.12/R-4.12-201906051800/binary/org.eclipse.platform.sdk.executable.win32.win32.x86_64_4.12.0.I20190605-1800> > > > > They do not show signature properties when extracted, so p2 installing > > these (p2 director via the installer or via p2 update) would not produce > > something with a signature in would appear. > > > > I would have expected this file to contain two signed executables, but > > that appears, as you suggest, not to be the case. :-( > > > > I asked Dani just now, and he also expected these would be signed... > > > > > > On 18.06.2019 16:13, Rolf Theunissen wrote: > >> > >> First of all, the properties of the executable show it very clearly. > >> > >> Second, *https://bugs.eclipse.org/bugs/show_bug.cgi?id=509799#c4* > <https://bugs.eclipse.org/bugs/show_bug.cgi?id=509799#c4>this > >> comment. > >> > >> eclipse.exe properties from Eclipse IDE for Java Developers Package > >> > >> Eclipse properties for product installed via oomph. > >> > >> Op 6/18/2019 om 4:04 PM schreef Ed Merks: > >>> > >>> Rolf, > >>> > >>> I don't believe what you suggest is the case. The eclipse.exe in the > >>> p2 repository, like all the artifacts in the repository, is > >>> signed. Otherwise, if one did an update and the executable needed > >>> to be updated, it would be updated with an unsigned version, which > >>> would not be acceptable. What makes you think/assume that these are > >>> not signed? > >>> > >>> > >>> On 18.06.2019 15:56, Rolf Theunissen wrote: > >>>> > >>>> Hi, > >>>> > >>>> I came across the bug below. What triggered me from the comments on > >>>> Bug 509799 is, that the 'eclipse.exe' is apparently signed as part > >>>> of the EPP build. As we are pushing Eclipse-Installer now, many > >>>> installations contain a 'eclipse.exe' that is not signed. > >>>> > >>>> So maybe the problem is not how to let Microsoft trust the Eclipse > >>>> Signature, but more how to *ensure that the 'eclipse.exe' is signed > >>>> on all installations*. > >>>> > >>>> *Bug 539954* <*https://bugs.eclipse.org/bugs/show_bug.cgi?id=539954* > <https://bugs.eclipse.org/bugs/show_bug.cgi?id=539954>> > >>>> - eclipse installer "SimRel 2018‑09" from ibm cloud is reported as > >>>> virus infected > >>>> *Bug 509799* <*https://bugs.eclipse.org/bugs/show_bug.cgi?id=509799* > <https://bugs.eclipse.org/bugs/show_bug.cgi?id=509799>> > >>>> - Symantec reports a Trojan SONAR.AM.C!g24 in eclipse > >>>> *Bug 485899* <*https://bugs.eclipse.org/bugs/show_bug.cgi?id=485899* > <https://bugs.eclipse.org/bugs/show_bug.cgi?id=485899>> > >>>> - upgrading eclipse causes anti-virus to alert > >>>> > >>>> Rolf > -- > Kind regards, > Andrey Loskutov > > *https://www.eclipse.org/user/aloskutov* > <https://www.eclipse.org/user/aloskutov> > --------------------------------------------- > Спасение утопающих - дело рук самих утопающих > --------------------------------------------- > _______________________________________________ > platform-dev mailing list > *platform-dev@eclipse.org* <platform-dev@eclipse.org> > To change your delivery options, retrieve your password, or unsubscribe > from this list, visit > *https://www.eclipse.org/mailman/listinfo/platform-dev* > <https://www.eclipse.org/mailman/listinfo/platform-dev> > > > _______________________________________________ > platform-dev mailing list > *platform-dev@eclipse.org* <platform-dev@eclipse.org> > To change your delivery options, retrieve your password, or unsubscribe > from this list, visit > *https://www.eclipse.org/mailman/listinfo/platform-dev* > <https://www.eclipse.org/mailman/listinfo/platform-dev> > > > -- > > Cheers, > Tim > > > *Timothy R. Webb* > Vice President, Operations > *Genuitec, LLC* <http://www.genuitec.com>, follow *@timrwebb* > <http://twitter.com/timrwebb> > or connect at *linkedin.com/in/trwebb* <http://www.linkedin.com/in/trwebb> > _______________________________________________ > platform-dev mailing list > platform-dev@eclipse.org > To change your delivery options, retrieve your password, or unsubscribe > from this list, visit > https://www.eclipse.org/mailman/listinfo/platform-dev > > > _______________________________________________ > platform-dev mailing list > platform-dev@eclipse.org > To change your delivery options, retrieve your password, or unsubscribe > from this list, visit > https://www.eclipse.org/mailman/listinfo/platform-dev -- Cheers, Tim *Timothy R. Webb* Vice President, Operations Genuitec, LLC <http://www.genuitec.com>, follow @timrwebb <http://twitter.com/timrwebb> or connect at linkedin.com/in/trwebb <http://www.linkedin.com/in/trwebb>
_______________________________________________ platform-dev mailing list platform-dev@eclipse.org To change your delivery options, retrieve your password, or unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/platform-dev
