Symantec Endpoint Protection absolutely hates ThinBundle

[ErosOlmi]

More or less yes.
To be valid, a certificate need to be signed by a CA (Certification authority) trusted world wide or you need to manually install a CA and trust it.

To check what CA are installed into your Windows Computer just do the following:

• Press the Windows key + R to bring up the Run command, type certmgr.msc and press Enter.
• When the Certificate Manager console opens, expand any certificates folder on the left. In the right pane, you'll see details about your certificates

Attached an example of one of my computers:
Capture.PNG

[rayleech]

Not sure if it helps, you could try KSoftware. Relatively inexpensive ($84/yr). It is on my list of certs to test signing my own code.

https://www.ksoftware.net/code-signi...html#read_more

[ErosOlmi]

Thanks a lot.
Very nice we can collect personal thoughts and see if we can find a solution.

Also found that COMODO lower their prices for personal certificates:
https://comodosslstore.com/codesigning.aspx
https://comodosslstore.com/code-sign...ng-certificate

[primo]

just recently the Symantec false positives discussed again with purebasic exe's, not only with thinbasic. i don't believe the purebasic team will ever buy a certificate for their product even it is a commercial product and that phenomena happened from many many years ago.
it is the responsibility of the end user. i think the best opinion in that purebasic thread is this one as far as i can see:
https://www.purebasic.fr/english/vie...=73234#p539448

[DirectuX]

Very nice we can collect personal thoughts and see if we can find a solution.

Personal though : of course it bother me when I've got AV alerts (had until whitelisted thinbasic). I already got on with trusting Eros & Petr, so, having thinbasic signed is not in my wish-list. However, if thinbasic's files could be CRC hash checked it would be a plus.

The problem i see here is the usage of upx. Also some oxygen stuff keeps triggering my av at times. Is the usage of upx needed?

I remember those alerts, same question.

[ErosOlmi]

Personal though : of course it bother me when I've got AV alerts (had until whitelisted thinbasic). I already got on with trusting Eros & Petr, so, having thinbasic signed is not in my wish-list. However, if thinbasic's files could be CRC hash checked it would be a plus.

Great suggestion.
Shortly I will add MD5 hash value to future thinBasic downloads.

In current thinBasic 1.10.8 you will find a tool under thinAir menu \Tools\User Tools\ called thinDownload (it is in a form of exe and thinBasic source code under \thinBasic\thiAir\Tools\ ...).
It is an experiment to add thinBasic download into thinAir.
I will add MD5 hash checking in that tool.

[ErosOlmi]

Added more download options in thinBasic web site download section:

• .ZIP file
• .7z file
• .EXE file

It seems some AV software and Browser download are more sensible to one type and less to the other.


Capture.PNG

[DirectuX]

Note: Symantec has many false positives: https://www.av-comparatives.org/test...st-march-2019/
and code signing seems not to be a cure-all solution : https://stackoverflow.com/questions/...lease-software

[primo]

There is what is like a sandbox look the utilities freeware and commercial
https://alternative.me/deep-freeze
there is a browser in a box
https://www.chip.de/downloads/BitBox..._72247952.html
600 MB
https://www.chip.de/downloads/BitBox..._48987303.html

it is said used in the German Gov offices , there are a free version and a paid version
i have tried to instal it years ago but failed since it needs components from the web and i can't access these components. but it seems nice. will try it again with windows 7 x64. if successful i will report. i am using old tool called Returnil in windows xp , and i don't use antiviruses at all from several years when mcafee destroyed all my windows settings.

[Anna Shipman]

Thanks a lot.
Very nice we can collect personal thoughts and see if we can find a solution.

Also found that COMODO lower their prices for personal certificates:
https://comodosslstore.com/codesigning.aspx
https://comodosslstore.com/code-sign...ng-certificate

Well after the current HSM inclusion in the code signing process, the prices of certs have increased manifold, But I obtained a Comodo Code signing certificate from SignMyCode which also offers other OV and EV Code Signing Certificates at affordable pricing than others in the market!
https://signmycode.com/buy-code-signing-certificates