Re: [CMake] Firefox and chrome warnings when dowloading cmake windows installers

[Nicholas Braden]

Previously there was a discussion about only Chrome:
http://public.kitware.com/pipermail/cmake/2016-April/063192.html

Good to know Firefox is affected too. For now I don't think anyone
actually knows whether the file in question is truly dangerous or not,
so use at your own risk. From what I've read it looks like this needs
to be fixed on CMake's end by signing the MSI file. (I guess Google
hates unsigned MSIs but is perfectly fine with unsigned EXEs)

On Mon, Apr 11, 2016 at 5:31 AM, Michael Brandl  wrote:
> Hi,
>
> when trying to download any of the windows-installers from the download-page
> (e.g. https://cmake.org/files/v3.4/cmake-3.4.3-win32-x86.exe), both firefox
> and chrome issue security warnings:
>
> Firefox:
> "Reported Unwanted Software Page!
> This web page at cmake.org has been reported to contain unwanted software
> and has been blocked based on your security preferences.
> Unwanted software pages try to install software that can be deceptive and
> affect your system in unexpected ways."
>
> Chrome:
> "The site ahead contains harmful programs
> Attackers on cmake.org might attempt to trick you into installing programs
> that harm your browsing experience (for example, by changing your homepage
> or showing extra ads on sites that you visit)."
>
> More info from google:
> https://www.google.com/transparencyreport/safebrowsing/diagnostic/index.html?hl=en-GB#url=https://cmake.org/files/v3.5/cmake-3.5.1-win32-x86.msi
> "Current status:
> Dangerous
> cmake.org/files/v3.5 contains harmful programs."
>
> Is this known to the community?
> Can the downloads at cmake.org be trusted?
>
> I did not find any direct links related to the issue and cmake except for
> this vaguely related one one from summer 2015:
> https://cmake.org/pipermail/cmake-developers/2015-July/025784.html.
>
> Best regards,
>
> Michael
>
> --
>
> Powered by www.kitware.com
>
> Please keep messages on-topic and check the CMake FAQ at:
> http://www.cmake.org/Wiki/CMake_FAQ
>
> Kitware offers various services to support the CMake community. For more
> information on each offering, please visit:
>
> CMake Support: http://cmake.org/cmake/help/support.html
> CMake Consulting: http://cmake.org/cmake/help/consulting.html
> CMake Training Courses: http://cmake.org/cmake/help/training.html
>
> Visit other Kitware open-source projects at
> http://www.kitware.com/opensource/opensource.html
>
> Follow this link to subscribe/unsubscribe:
> http://public.kitware.com/mailman/listinfo/cmake
-- 

Powered by www.kitware.com

Please keep messages on-topic and check the CMake FAQ at: 
http://www.cmake.org/Wiki/CMake_FAQ

Kitware offers various services to support the CMake community. For more 
information on each offering, please visit:

CMake Support: http://cmake.org/cmake/help/support.html
CMake Consulting: http://cmake.org/cmake/help/consulting.html
CMake Training Courses: http://cmake.org/cmake/help/training.html

Visit other Kitware open-source projects at 
http://www.kitware.com/opensource/opensource.html

Follow this link to subscribe/unsubscribe:
http://public.kitware.com/mailman/listinfo/cmake

[CMake] Firefox and chrome warnings when dowloading cmake windows installers

[Michael Brandl]

Hi,

 

when trying to download any of the windows-installers from the download-page (e.g. https://cmake.org/files/v3.4/cmake-3.4.3-win32-x86.exe), both firefox and chrome issue security warnings:

Firefox:
"Reported Unwanted Software Page!

This web page at cmake.org has been reported to contain unwanted software and has been blocked based on your security preferences.

Unwanted software pages try to install software that can be deceptive and affect your system in unexpected ways."

 

Chrome:

"The site ahead contains harmful programs
Attackers on cmake.org might attempt to trick you into installing programs that harm your browsing experience (for example, by changing your homepage or showing extra ads on sites that you visit)."



More info from google:

https://www.google.com/transparencyreport/safebrowsing/diagnostic/index.html?hl=en-GB#url="">

"Current status:
Dangerous

cmake.org/files/v3.5 contains harmful programs."



Is this known to the community?
Can the downloads at cmake.org be trusted?

I did not find any direct links related to the issue and cmake except for this vaguely related one one from summer 2015: https://cmake.org/pipermail/cmake-developers/2015-July/025784.html.

Best regards,

Michael

-- 

Powered by www.kitware.com

Please keep messages on-topic and check the CMake FAQ at: 
http://www.cmake.org/Wiki/CMake_FAQ

Kitware offers various services to support the CMake community. For more 
information on each offering, please visit:

CMake Support: http://cmake.org/cmake/help/support.html
CMake Consulting: http://cmake.org/cmake/help/consulting.html
CMake Training Courses: http://cmake.org/cmake/help/training.html

Visit other Kitware open-source projects at 
http://www.kitware.com/opensource/opensource.html

Follow this link to subscribe/unsubscribe:
http://public.kitware.com/mailman/listinfo/cmake