Re: Windows defender is flagging LeoApp.exe as carrying a trojan

[Matt Wilkie]

>
> I think the included adware problem is an old one. if so, little unfair to 
> bring it up again 
> anything more recent? 
> sourceforge is under new management 
>
[...] 

> from the link, QQQ 
> Update: Since the writing of this article, SourceForge has been sold to a 
> new company that stopped the DevShare program discussed in this article. 
> We’re leaving this article here for historical reference, but it has since 
> stopped these shady practices. 
> QQQ 
>

I did post a follow up qualifier that referenced this. Did that not make it 
through? (there have been reports of missing posts in recent weeks).

matt

-- 
You received this message because you are subscribed to the Google Groups 
"leo-editor" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to leo-editor+unsubscr...@googlegroups.com.
To post to this group, send email to leo-editor@googlegroups.com.
Visit this group at https://groups.google.com/group/leo-editor.
For more options, visit https://groups.google.com/d/optout.

Re: Windows defender is flagging LeoApp.exe as carrying a trojan

[ne1uno]

red-lang is having some of the same false positives as python exe packagers
not every AV program is tripped up. 
something as simple as calling up the commandline using the win32 api can do 
it. 

it's likely some huristic as Terry says 
so companies are loathe to change scan results even when presented with 
evidence.

this is something that the language foundation and developers have to respond 
to.
users and random people complaining won't change anything.
changing hosting obviously won't change anything

need a button to press to get details on the OS, the version of AV and Leo 
package
to simplify making a bug report and don't forget, 
most people just move on to the next editor they wanted to try on the list
or revert to an earlier version


via Matt Wilkie
 """I've read that downloads from SourceForge often have this problem, any SF 
project not just Leo. It's got something to do with a feature that SF has for 
creating easy installers automatically, """

the company at the time that bought out sourceforge offered an opt in program 
so it was mostly the developers themselves
or their lack of attention to detail that got them repackaged

-- 
You received this message because you are subscribed to the Google Groups 
"leo-editor" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to leo-editor+unsubscr...@googlegroups.com.
To post to this group, send email to leo-editor@googlegroups.com.
Visit this group at https://groups.google.com/group/leo-editor.
For more options, visit https://groups.google.com/d/optout.

Re: Windows defender is flagging LeoApp.exe as carrying a trojan

[ne1uno]

I think the included adware problem is an old one. if so, little unfair to 
bring it up again
anything more recent?
sourceforge is under new management

a simple way to verify is publish a hash for any executable
it's extremely unlikely they are repackaging your exe or tampering with Leo in 
any way
it could hardly be kept a secret very long these days though websites are 
hacked all the time
so even a hash published is not 100% foolproof


from the link, QQQ
Update: Since the writing of this article, SourceForge has been sold to a new 
company that stopped the DevShare program discussed in this article. We’re 
leaving this article here for historical reference, but it has since stopped 
these shady practices.
QQQ


*none the less, I have heard others who will never use soureforge since then.
it might be a good idea to distribute alternatively on github in a distribution 
branch or repo

-- 
You received this message because you are subscribed to the Google Groups 
"leo-editor" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to leo-editor+unsubscr...@googlegroups.com.
To post to this group, send email to leo-editor@googlegroups.com.
Visit this group at https://groups.google.com/group/leo-editor.
For more options, visit https://groups.google.com/d/optout.

Re: Windows defender is flagging LeoApp.exe as carrying a trojan

[Edward K. Ream]

On Mon, Mar 12, 2018 at 3:26 PM, Matt Wilkie  wrote:

> I tried again on a brand new machine and install of windows and still
>> LeoApp.exe gets flagged by WIndows Defender (Windows 10). The 5.7final
>> archive was downloaded from SourceForge and i think I will stay away from
>> SourceForge
>>
>
> I've read that downloads from SourceForge often have this problem, any SF
> project not just Leo. It's got something to do with a feature that SF has
> for creating easy installers automatically, and bundling in advertising
> that shows during the installation process. The project is supposed to to
> have to specifically take advantage of the feature, but some shady
> behaviour in the past indicates maybe that's not always the case:
>

​This is reason enough to drop SourceForge.  We could call it good timing
;-)

Edward

-- 
You received this message because you are subscribed to the Google Groups 
"leo-editor" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to leo-editor+unsubscr...@googlegroups.com.
To post to this group, send email to leo-editor@googlegroups.com.
Visit this group at https://groups.google.com/group/leo-editor.
For more options, visit https://groups.google.com/d/optout.

Re: Windows defender is flagging LeoApp.exe as carrying a trojan

[Terry Brown]

On Mon, 12 Mar 2018 13:40:06 -0700 (PDT)
Matt Wilkie  wrote:

> > I've read that downloads from SourceForge often have this problem,
> > any SF project not just Leo. It's got something to do with a
> > feature that SF has for creating easy installers automatically, and
> > bundling in advertising that shows during the installation process.
> > The project is supposed to to have to specifically take advantage
> > of the feature, but some shady behaviour in the past indicates
> > maybe that's not always the case:
> >
> > https://www.howtogeek.com/218764/warning-don%E2%80%99t-download-software-from-sourceforge-if-you-can-help-it/
> 
> Reading on, I see  that SF changed ownership in 2016 and immediately 
> stopped the shady DevShare program:
> https://sourceforge.net/blog/sourceforge-acquisition-and-future-plans/
> So maybe it's less a matter of the AV being pro-active and more of
> being slow to re-trust (understandably!).

False positives aren't uncommon with open source software either.  My
work anti-virus whines about things just because they're "not commonly
executed".  Some of the heuristics / finger prints the antivirus
software uses are I think too broad, but not a problem for 99% of users
who only use Word and Excel.

Cheers -Terry

-- 
You received this message because you are subscribed to the Google Groups 
"leo-editor" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to leo-editor+unsubscr...@googlegroups.com.
To post to this group, send email to leo-editor@googlegroups.com.
Visit this group at https://groups.google.com/group/leo-editor.
For more options, visit https://groups.google.com/d/optout.

Re: Windows defender is flagging LeoApp.exe as carrying a trojan

[Matt Wilkie]

> I've read that downloads from SourceForge often have this problem, any SF 
> project not just Leo. It's got something to do with a feature that SF has 
> for creating easy installers automatically, and bundling in advertising 
> that shows during the installation process. The project is supposed to to 
> have to specifically take advantage of the feature, but some shady 
> behaviour in the past indicates maybe that's not always the case:
>
>
> https://www.howtogeek.com/218764/warning-don%E2%80%99t-download-software-from-sourceforge-if-you-can-help-it/
>

Reading on, I see  that SF changed ownership in 2016 and immediately 
stopped the shady DevShare program:
https://sourceforge.net/blog/sourceforge-acquisition-and-future-plans/
So maybe it's less a matter of the AV being pro-active and more of being 
slow to re-trust (understandably!).

matt

-- 
You received this message because you are subscribed to the Google Groups 
"leo-editor" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to leo-editor+unsubscr...@googlegroups.com.
To post to this group, send email to leo-editor@googlegroups.com.
Visit this group at https://groups.google.com/group/leo-editor.
For more options, visit https://groups.google.com/d/optout.

Re: Windows defender is flagging LeoApp.exe as carrying a trojan

[Matt Wilkie]

>
> I tried again on a brand new machine and install of windows and still 
> LeoApp.exe gets flagged by WIndows Defender (Windows 10). The 5.7final 
> archive was downloaded from SourceForge and i think I will stay away from 
> SourceForge
>

I've read that downloads from SourceForge often have this problem, any SF 
project not just Leo. It's got something to do with a feature that SF has 
for creating easy installers automatically, and bundling in advertising 
that shows during the installation process. The project is supposed to to 
have to specifically take advantage of the feature, but some shady 
behaviour in the past indicates maybe that's not always the case:

https://www.howtogeek.com/218764/warning-don%E2%80%99t-download-software-from-sourceforge-if-you-can-help-it/

matt

-- 
You received this message because you are subscribed to the Google Groups 
"leo-editor" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to leo-editor+unsubscr...@googlegroups.com.
To post to this group, send email to leo-editor@googlegroups.com.
Visit this group at https://groups.google.com/group/leo-editor.
For more options, visit https://groups.google.com/d/optout.

Re: Windows defender is flagging LeoApp.exe as carrying a trojan

[Satish Goda]

I tried again on a brand new machine and install of windows and still 
LeoApp.exe gets flagged by WIndows Defender (Windows 10). The 5.7final 
archive was downloaded from SourceForge and i think I will stay away from 
SourceForge

Will have to use an older version of Leo which does not have this issue.

On Friday, March 9, 2018 at 2:13:02 AM UTC-8, Edward K. Ream wrote:
>
>
>
> On Fri, Mar 9, 2018 at 1:52 AM, Satish Goda  > wrote:
>
>> I just downloaded 5.7 final from Source Forge
>>
>> https://sourceforge.net/projects/leo/files/Leo/5.7-final/Leo_5.7_final_Win.zip/download
>>  
>> 
>>
>>
>> After extracting and running LeoApp.exe, I see a warning from Window 
>> defender (I am using Windows 10 and I have virus scanning enables for 
>> ages). Did anybody else notice this? 
>>
>
> ​I haven't.​
>  
>
>>
>> 5.7b2 runs fine and I downloaded it from Source forge last month.
>>
>
> ​I wouldn't ignore this warning.  It may say something about your machine.
>
> Edward
>

-- 
You received this message because you are subscribed to the Google Groups 
"leo-editor" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to leo-editor+unsubscr...@googlegroups.com.
To post to this group, send email to leo-editor@googlegroups.com.
Visit this group at https://groups.google.com/group/leo-editor.
For more options, visit https://groups.google.com/d/optout.

Re: Windows defender is flagging LeoApp.exe as carrying a trojan

[Edward K. Ream]

On Fri, Mar 9, 2018 at 1:52 AM, Satish Goda  wrote:

> I just downloaded 5.7 final from Source Forge
>
> https://sourceforge.net/projects/leo/files/Leo/5.7-final/Leo_5.7_final_Win.zip/download
>  
> 
>
>
> After extracting and running LeoApp.exe, I see a warning from Window
> defender (I am using Windows 10 and I have virus scanning enables for
> ages). Did anybody else notice this?
>

​I haven't.​


>
> 5.7b2 runs fine and I downloaded it from Source forge last month.
>

​I wouldn't ignore this warning.  It may say something about your machine.

Edward

-- 
You received this message because you are subscribed to the Google Groups 
"leo-editor" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to leo-editor+unsubscr...@googlegroups.com.
To post to this group, send email to leo-editor@googlegroups.com.
Visit this group at https://groups.google.com/group/leo-editor.
For more options, visit https://groups.google.com/d/optout.

Windows defender is flagging LeoApp.exe as carrying a trojan

[Satish Goda]

I just downloaded 5.7 final from Source Forge

https://sourceforge.net/projects/leo/files/Leo/5.7-final/Leo_5.7_final_Win.zip/download
 



After extracting and running LeoApp.exe, I see a warning from Window 
defender (I am using Windows 10 and I have virus scanning enables for 
ages). Did anybody else notice this? 

5.7b2 runs fine and I downloaded it from Source forge last month.

Thanks,

-- 
You received this message because you are subscribed to the Google Groups 
"leo-editor" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to leo-editor+unsubscr...@googlegroups.com.
To post to this group, send email to leo-editor@googlegroups.com.
Visit this group at https://groups.google.com/group/leo-editor.
For more options, visit https://groups.google.com/d/optout.