With folks talking about UNC links and Zoom, I had to dig a little bit. I've noticed an odd behavior (to me) with respect to opening programs on an anonymous remote server. Windows 7 will prompt before running such a program. Windows 8/10 will NOT!pic.twitter.com/KtsjXTQfec
-
Show this thread
-
If you look at the prompt, though, the prompt indicates that Win7 is complaining that it cannot verify the *signature*. Yes, that calc.exe is indeed not signed. However, even with a valid-signed file, Win7 displays the same prompt! That same file on desktop runs as expected...pic.twitter.com/thxc4HQtRY
2 replies 1 retweet 4 likesShow this thread -
Regardless of the reason for the prompt in Win 7, I have to imagine that its behavior seems to ironically be safer than Windows 8 or Windows 10, which seem to run anonymous-remotely-hosted programs without prompting, in my testing. Thoughts??
4 replies 1 retweet 2 likesShow this thread -
Replying to @wdormann
Could have something to do with smart screen. Just a wild guess.
1 reply 0 retweets 0 likes -
Guess would go something like this: win 7 uses a very blunt protection mechanism of warning when running code from suspect source. Win 10 maybe able to be a bit more selective about when it warns based on classification of exe.
1 reply 0 retweets 1 like -
When happens if you try the same thing with an exe that smart screen has never seen before? If behavior is the same likely a bug.
1 reply 0 retweets 0 likes
I just created a new HelloWorld app in Visual Studio, whose hash has never been seen before, and it behaves the same way. https://www.virustotal.com/gui/file/e86ad63b86433034ff89141474f92deefb68722bd2f4682452b7edd4ddecfe72/detection …pic.twitter.com/V23aVcr45j
-
-
Replying to @wdormann
Yeah this seems like an objectively bad change in windows.
0 replies 0 retweets 1 likeThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.