Re: [CMake] CMake download blocked by Google Chrome

2016-04-10 Thread Raymond Wan 
Hi Matthew,


On Sun, Apr 10, 2016 at 10:25 PM, Matthew Rule  wrote:
> When trying to download cmake-3.5.1-win32-x86.msi from
> https://cmake.org/download/ I received the following message:
> https://i.gyazo.com/6cf9cd56e9cf1f513f649cf59f768241.png
>
> I'd assume that this message is displayed to most Chrome users (if Google
> uses and distributes a single collection of malware filter lists) so it
> should be a big concern. Is it currently safe to download software from
> cmake.org, or has someone injected malicious code into it? Why has this
> message come up? Can I ignore it safely?


I guess it is safe, but if you're not in a hurry, you can wait until
the webmasters of cmake.org (not me) resolve the issue first so that
Google removes the site from their warning list.  According to:

https://www.google.com/transparencyreport/safebrowsing/diagnostic/index.html#url=cmake.org

Google seems to have marked it as "partially dangerous".  Of course,
Google could be wrong -- I think this filter list is maintained
automatically and maybe they got the criteria wrong this time.

Ray
-- 

Powered by www.kitware.com

Please keep messages on-topic and check the CMake FAQ at: 
http://www.cmake.org/Wiki/CMake_FAQ

Kitware offers various services to support the CMake community. For more 
information on each offering, please visit:

CMake Support: http://cmake.org/cmake/help/support.html
CMake Consulting: http://cmake.org/cmake/help/consulting.html
CMake Training Courses: http://cmake.org/cmake/help/training.html

Visit other Kitware open-source projects at 
http://www.kitware.com/opensource/opensource.html

Follow this link to subscribe/unsubscribe:
http://public.kitware.com/mailman/listinfo/cmake

Re: [CMake] CMake download blocked by Google Chrome

2016-04-10 Thread Cristian Adam 
Hi,

virustotal.com (which belongs to google) doesn't find any problems with the
msi file.

I assume Google Chrome panics because the file is not digitally signed by
CMake.org.

One can get an open source authenticode for 14€ from Certum

.


Cheers,
Cristian.

On Sun, Apr 10, 2016 at 4:25 PM, Matthew Rule 
wrote:

> When trying to download cmake-3.5.1-win32-x86.msi from
> https://cmake.org/download/ I received the following message:
> https://i.gyazo.com/6cf9cd56e9cf1f513f649cf59f768241.png
>
> I'd assume that this message is displayed to most Chrome users (if Google
> uses and distributes a single collection of malware filter lists) so it
> should be a big concern. Is it currently safe to download software from
> cmake.org, or has someone injected malicious code into it? Why has this
> message come up? Can I ignore it safely?
>
> Thanks,
>
> Matt
>
> --
>
> Powered by www.kitware.com
>
> Please keep messages on-topic and check the CMake FAQ at:
> http://www.cmake.org/Wiki/CMake_FAQ
>
> Kitware offers various services to support the CMake community. For more
> information on each offering, please visit:
>
> CMake Support: http://cmake.org/cmake/help/support.html
> CMake Consulting: http://cmake.org/cmake/help/consulting.html
> CMake Training Courses: http://cmake.org/cmake/help/training.html
>
> Visit other Kitware open-source projects at
> http://www.kitware.com/opensource/opensource.html
>
> Follow this link to subscribe/unsubscribe:
> http://public.kitware.com/mailman/listinfo/cmake
>
-- 

Powered by www.kitware.com

Please keep messages on-topic and check the CMake FAQ at: 
http://www.cmake.org/Wiki/CMake_FAQ

Kitware offers various services to support the CMake community. For more 
information on each offering, please visit:

CMake Support: http://cmake.org/cmake/help/support.html
CMake Consulting: http://cmake.org/cmake/help/consulting.html
CMake Training Courses: http://cmake.org/cmake/help/training.html

Visit other Kitware open-source projects at 
http://www.kitware.com/opensource/opensource.html

Follow this link to subscribe/unsubscribe:
http://public.kitware.com/mailman/listinfo/cmake

Re: [CMake] CMake download blocked by Google Chrome

2016-04-10 Thread Matthew Rule 
Ok thanks for the responses. I will go ahead with the download in that
case. Sorry if the question was a little offtopic for this mailing list, I
see it's mostly technical discussion.

Thanks,

Matt

On 10 April 2016 at 15:42, Cristian Adam  wrote:

> Hi,
>
> virustotal.com (which belongs to google) doesn't find any problems with
> the msi file.
>
> I assume Google Chrome panics because the file is not digitally signed by
> CMake.org.
>
> One can get an open source authenticode for 14€ from Certum
> 
> .
>
>
> Cheers,
> Cristian.
>
> On Sun, Apr 10, 2016 at 4:25 PM, Matthew Rule 
> wrote:
>
>> When trying to download cmake-3.5.1-win32-x86.msi from
>> https://cmake.org/download/ I received the following message:
>> https://i.gyazo.com/6cf9cd56e9cf1f513f649cf59f768241.png
>>
>> I'd assume that this message is displayed to most Chrome users (if Google
>> uses and distributes a single collection of malware filter lists) so it
>> should be a big concern. Is it currently safe to download software from
>> cmake.org, or has someone injected malicious code into it? Why has this
>> message come up? Can I ignore it safely?
>>
>> Thanks,
>>
>> Matt
>>
>> --
>>
>> Powered by www.kitware.com
>>
>> Please keep messages on-topic and check the CMake FAQ at:
>> http://www.cmake.org/Wiki/CMake_FAQ
>>
>> Kitware offers various services to support the CMake community. For more
>> information on each offering, please visit:
>>
>> CMake Support: http://cmake.org/cmake/help/support.html
>> CMake Consulting: http://cmake.org/cmake/help/consulting.html
>> CMake Training Courses: http://cmake.org/cmake/help/training.html
>>
>> Visit other Kitware open-source projects at
>> http://www.kitware.com/opensource/opensource.html
>>
>> Follow this link to subscribe/unsubscribe:
>> http://public.kitware.com/mailman/listinfo/cmake
>>
>
>
-- 

Powered by www.kitware.com

Please keep messages on-topic and check the CMake FAQ at: 
http://www.cmake.org/Wiki/CMake_FAQ

Kitware offers various services to support the CMake community. For more 
information on each offering, please visit:

CMake Support: http://cmake.org/cmake/help/support.html
CMake Consulting: http://cmake.org/cmake/help/consulting.html
CMake Training Courses: http://cmake.org/cmake/help/training.html

Visit other Kitware open-source projects at 
http://www.kitware.com/opensource/opensource.html

Follow this link to subscribe/unsubscribe:
http://public.kitware.com/mailman/listinfo/cmake

Re: [CMake] CMake download blocked by Google Chrome

2016-04-10 Thread Raymond Wan 
Hi Matthew,


On Sun, Apr 10, 2016 at 10:45 PM, Matthew Rule  wrote:
> Ok thanks for the responses. I will go ahead with the download in that case.
> Sorry if the question was a little offtopic for this mailing list, I see
> it's mostly technical discussion.


...I don't know.  Your query could be "on-topic" since it at least
helps draw attention to the problem to the web masters of cmake.org.
Maybe it's nothing; or maybe a harmful file did sneak on to the site.

Anyway, not everyone will know that Google has marked the site as
"partially dangerous" since others may use other browsers (i.e., I use
Firefox and received no warning).

Ray
-- 

Powered by www.kitware.com

Please keep messages on-topic and check the CMake FAQ at: 
http://www.cmake.org/Wiki/CMake_FAQ

Kitware offers various services to support the CMake community. For more 
information on each offering, please visit:

CMake Support: http://cmake.org/cmake/help/support.html
CMake Consulting: http://cmake.org/cmake/help/consulting.html
CMake Training Courses: http://cmake.org/cmake/help/training.html

Visit other Kitware open-source projects at 
http://www.kitware.com/opensource/opensource.html

Follow this link to subscribe/unsubscribe:
http://public.kitware.com/mailman/listinfo/cmake

Re: [CMake] CMake download blocked by Google Chrome

2016-04-10 Thread Matthew Rule 
FYI I don't think it has to do with digital signing because I also have the
same problem with the Windows ZIP. Anyway, I'll trust it.

Thanks

Matt

On 10 April 2016 at 15:42, Cristian Adam  wrote:

> Hi,
>
> virustotal.com (which belongs to google) doesn't find any problems with
> the msi file.
>
> I assume Google Chrome panics because the file is not digitally signed by
> CMake.org.
>
> One can get an open source authenticode for 14€ from Certum
> 
> .
>
>
> Cheers,
> Cristian.
>
> On Sun, Apr 10, 2016 at 4:25 PM, Matthew Rule 
> wrote:
>
>> When trying to download cmake-3.5.1-win32-x86.msi from
>> https://cmake.org/download/ I received the following message:
>> https://i.gyazo.com/6cf9cd56e9cf1f513f649cf59f768241.png
>>
>> I'd assume that this message is displayed to most Chrome users (if Google
>> uses and distributes a single collection of malware filter lists) so it
>> should be a big concern. Is it currently safe to download software from
>> cmake.org, or has someone injected malicious code into it? Why has this
>> message come up? Can I ignore it safely?
>>
>> Thanks,
>>
>> Matt
>>
>> --
>>
>> Powered by www.kitware.com
>>
>> Please keep messages on-topic and check the CMake FAQ at:
>> http://www.cmake.org/Wiki/CMake_FAQ
>>
>> Kitware offers various services to support the CMake community. For more
>> information on each offering, please visit:
>>
>> CMake Support: http://cmake.org/cmake/help/support.html
>> CMake Consulting: http://cmake.org/cmake/help/consulting.html
>> CMake Training Courses: http://cmake.org/cmake/help/training.html
>>
>> Visit other Kitware open-source projects at
>> http://www.kitware.com/opensource/opensource.html
>>
>> Follow this link to subscribe/unsubscribe:
>> http://public.kitware.com/mailman/listinfo/cmake
>>
>
>
-- 

Powered by www.kitware.com

Please keep messages on-topic and check the CMake FAQ at: 
http://www.cmake.org/Wiki/CMake_FAQ

Kitware offers various services to support the CMake community. For more 
information on each offering, please visit:

CMake Support: http://cmake.org/cmake/help/support.html
CMake Consulting: http://cmake.org/cmake/help/consulting.html
CMake Training Courses: http://cmake.org/cmake/help/training.html

Visit other Kitware open-source projects at 
http://www.kitware.com/opensource/opensource.html

Follow this link to subscribe/unsubscribe:
http://public.kitware.com/mailman/listinfo/cmake

Re: [CMake] CMake download blocked by Google Chrome

2016-04-11 Thread Bill Hoffman 

On 4/10/2016 10:40 AM, Raymond Wan wrote:

Google seems to have marked it as "partially dangerous".  Of course,
Google could be wrong -- I think this filter list is maintained
automatically and maybe they got the criteria wrong this time.
We are looking into this.  We have had false positives in the past for 
virus checkers and the downloads in the past.


-Bill

--

Powered by www.kitware.com

Please keep messages on-topic and check the CMake FAQ at: 
http://www.cmake.org/Wiki/CMake_FAQ

Kitware offers various services to support the CMake community. For more 
information on each offering, please visit:

CMake Support: http://cmake.org/cmake/help/support.html
CMake Consulting: http://cmake.org/cmake/help/consulting.html
CMake Training Courses: http://cmake.org/cmake/help/training.html

Visit other Kitware open-source projects at 
http://www.kitware.com/opensource/opensource.html

Follow this link to subscribe/unsubscribe:
http://public.kitware.com/mailman/listinfo/cmake