With both Windows and MacOS both putting scary warnings and hard to bypass blocking methods on improperly signed software this could eventually lead to developers being ransomed, “pay us big money or we will revoke your certificate”. This is not the only incident like this.
Information on the revocation of WinRAR 5.91 digital certificate
11–20 of 156 posts
Re: Information on the revocation of WinRAR 5.91 digital certificate
#12Earlier quoted context omitted.
Yes. People who don't know any better alternatives continue to use it, and continue to recommend it to other people. So the cycle continues. Heck, WinZip still makes new releases so I'm sure people still use that too.
> People who don't know any better alternatives continue to use it Genuine question: what are the better alternatives?
7zip (the archive manager, not the compression format), at least for Windows
Re: Information on the revocation of WinRAR 5.91 digital certificate
#13Do people still use WinRar? :O
Yes. People who don't know any better alternatives continue to use it, and continue to recommend it to other people. So the cycle continues. Heck, WinZip still makes new releases so I'm sure people still use that too.
Or maybe their customers just like the product, as in the GUI and feature and don’t care that another compression algorithm can shave off a few extra megabytes.
If I recall correctly WinRAR can make self extracting archives pretty easily. If you use that feature it might be easier/better to just continue using WinRAR.
I love the fact that small software companies like RARLAB can still exist.
Re: Information on the revocation of WinRAR 5.91 digital certificate
#14Do people still use WinRar? :O
WinRAR does everything you ask of it; compress or decompress archives in one click. Why wouldn't people still use it?
Re: Information on the revocation of WinRAR 5.91 digital certificate
#15I know the authorities need to err on the side of caution, but it's quite astonishing to me that someone at the authority didn't just say 'It's WinRAR...' and let it slide. It's got to be one of the most well known tools in the entire windows ecosystem.
This CA sounds kinda incompetent. Even if you ignore the fact who winrar is, just the nature of the tool itself makes its silly to use virustotal as the gatekeeper.
Re: Information on the revocation of WinRAR 5.91 digital certificate
#16With both Windows and MacOS both putting scary warnings and hard to bypass blocking methods on improperly signed software this could eventually lead to developers being ransomed, “pay us big money or we will revoke your certificate”. This is not the only incident like this.
That would also be possible for a successful website or app using pinning. So far there are no public reports of it happening.
Would probably also put the CA out of business in no time if they did.
Re: Information on the revocation of WinRAR 5.91 digital certificate
#17Re: Information on the revocation of WinRAR 5.91 digital certificate
#18With both Windows and MacOS both putting scary warnings and hard to bypass blocking methods on improperly signed software this could eventually lead to developers being ransomed, “pay us big money or we will revoke your certificate”. This is not the only incident like this.
>this could eventually lead to developers being ransomed, “pay us big money or we will revoke your certificate”
by whom? the platform makers (apple/microsoft) or malicious third parties?
Re: Information on the revocation of WinRAR 5.91 digital certificate
#19Do people still use WinRar? :O
Yes. People who don't know any better alternatives continue to use it, and continue to recommend it to other people. So the cycle continues. Heck, WinZip still makes new releases so I'm sure people still use that too.
I have found that some multipart rar files fail to extract properly with 7zip. Most are fine though, but I normally have the unrar-nonfree package installed for the few that don't work.
Re: Information on the revocation of WinRAR 5.91 digital certificate
#20Not a lawyer but I suspect there's a viable tortious interference claim. Revocation is effectively telling your customers that your product is unsafe, if done without cause it could be actionable.