Monday, December 30

Geek

Daily News Stuff 30 December 2019

Intermittently Retromingent Edition

Tech News



Disclaimer: I say potato, you say potato, potato, potato, potato, potato, now I'm hungry.

Posted by: Pixy Misa at 09:07 PM | Comments (5) | Add Comment | Trackbacks (Suck)
Post contains 134 words, total size 2 kb.

1 The amazing thing about that EVGA motherboard is all the stuff they stuck on it.  There was a thread over at [H]ardforum this weekend about it where people were saying it's basically just so the LN2 people can set more records.
The amazing thing to me about that is, then why add all those extra ports--probably approximately 0 people will ever use them, especially since that $1800 price is a pre-sale discount, and the regular price is going to be $200 higher.  Might as well be honest and put 1 M.2, 1 SATA, and 1 PCIe x16.

Posted by: Rick C at Tuesday, December 31 2019 12:56 AM (Iwkd4)

2 Re: Medium:  the post is that no matter how long you've had your domain, if you put up a new set of binaries (apparently the guy who wrote the post has a couple of emulators, including a snes one), Google will flag your site as potentially dangerous for having "uncommon binaries", even if all the virus checkers have nothing to say about it.  He thought about getting a cert to code-sign his binaries, but it's both expensive, and requires you to divulge your name (and an EV cert requires you to have a BBB-listed business.)
My company is sort of in this boat, in a much more limited way: we distribute binary updates to our commercial software, but it's behind a password, so search engines can't even see them, but since we're not code-signing, Window SafeScreen tries to block them from running, and over the years, they've made it more restrictive (in the most recent versions of Windows 10, non-admin users don't get the "run anyway" button so we're considering getting an EV cert.)

Posted by: Rick C at Tuesday, December 31 2019 01:00 AM (Iwkd4)

3 Right.  I've seen that stuff happen, and it's very annoying.  Is it safer to put up compressed files - zip or xz or whatever?  I'll have a need to offer binary downloads pretty soon.

Posted by: Pixy Misa at Thursday, January 02 2020 12:07 AM (PiXy!)

4 If you are hosting Windows binaries that could be run by non-administrators you should probably get an EV cert, because even with a regular cert, SmartScreen may block the program until it's been downloaded enough times--this is a separate, although related, issue from "Google calling your site possibly dangerous".  If you put the binaries in a password-protected directory, then Google can't index it, although I guess it's possible Chrome may complain.  I just did a quick check, downloading a DLL I compiled, and a copy of a signed Microsoft program; the program downloaded just like a text file would, but the unsigned DLL came up with a warning in the download area that this type of file can damage a computer (you get the same kind of warning with java jars; something you see a lot of if you play modded Minecraft.)
I also downloaded, with Edge, a zip file containing an executable I wrote (again, unsigned); the zip downloaded fine, but when I tried to run the exe, SmartScreen "protected" me by not running it (although there's a smallish "more info" link you can click that gives you a "run anyway" option (but if you're not an administrator you will NOT get that.))
At the moment I don't have a machine running Linux so I can't speak to that--although I don't remember if Linux even offers signed binaries (IIRC Linux browsers will warn you about things like jars).
Right now I tell my customers they need to be admin to run updates.  One has complained strenuously about it, to the point that my boss has agreed in principle we should get a regular code-signing cert (I didn't know at the time that EV certs let Windows skip the "unfamiliar app" syndrome) although they haven't done anything about it yet.  If the customer complains again I'll probably need to suggest we look at the EV instead.

Posted by: Rick C at Thursday, January 02 2020 04:08 AM (Iwkd4)

5 Thanks.  Initially it will be Linux / Mac only since the language I'm using (Crystal) doesn't fully support Windows.  This is a personal project so an EV certificate is probably not going to happen (it's a command-line tool to sync data with the new system).

I'll see how it works out.

Posted by: Pixy Misa at Thursday, January 02 2020 11:06 AM (PiXy!)

Hide Comments | Add Comment




Apple pies are delicious. But never mind apple pies. What colour is a green orange?




53kb generated in CPU 0.0146, elapsed 0.1404 seconds.
58 queries taking 0.1316 seconds, 344 records returned.
Powered by Minx 1.1.6c-pink.