Live data from Hacker News

Microsoft no longer signs Windows drivers for Process Hacker

borncity.com

11–20 of 543 posts

Re: Microsoft no longer signs Windows drivers for Process Hacker

#11
> Microsoft Process Explorer has the same functionality so they don't have standing to block competitors then go and include the exact same features in their own software.

> Microsoft has been secretly adding more powerful features than Process Hacker via their SAC product – SAC has no security whatsoever by design – they're clearly targeting the project not because of any actual technical issues but rather because we're more popular than their products, so they're using the same (illegal and anti-competitive) tactics they used against Netscape Navigator to eliminate competition but also labeling the project malicious in an attempt to mislead the competition regulators.

Yet another example of a trillion dollar tech company stifling competition and innovation with anti-competitive tactics.

Both Microsoft and Apple require developers to sign software in order for their apps to run on Windows or macOS. Developers must pay to buy and renew their certificates regularly and must remain in good standing with either company if they want their apps to run on either OS. At any time, and for any reason, Microsoft or Apple can revoke your certificates and prevent Windows or macOS from running your apps at all.

The control over what apps can run on Windows or macOS is all about securing profits for either company, first and foremost. Actual security is just an afterthought.

Both companies take it one step further and are locking developers out of kernel space. Apple stills signs a few third-party .kexts, like macFUSE, but everyone else is out of luck. Microsoft needs to sign kernel-mode drivers or situations like the one in the OP will occur.

This is certainly different than, but reminiscent of, the situation with AppGet and Microsoft's clone, Winget[1].

[1] https://keivan.io/the-day-appget-died/

Re: Microsoft no longer signs Windows drivers for Process Hacker

#12
post #3

Is there no way to run unsigned software on windows?

For drivers, I don’t think so. You can enable some boot settings that allow you to run unsigned drivers, for development purposes, but it will revert upon reboot, without anyway to enable it permanently.

There is: test signing. Painful for non-savvy users, but not impossible.

Re: Microsoft no longer signs Windows drivers for Process Hacker

#13
post #5

Earlier quoted context omitted.

For drivers, I don’t think so. You can enable some boot settings that allow you to run unsigned drivers, for development purposes, but it will revert upon reboot, without anyway to enable it permanently.

you would have to automate that somehow if it becomes an issue

All Microsoft has to do to stop that from being a problem is to tell Defender to block that automation from running on Windows, for example, by refusing to run anything signed with the automation developer's certificates.

Re: Microsoft no longer signs Windows drivers for Process Hacker

#14
post #8

Earlier quoted context omitted.

Where did they actually do nice things? VSCode is still not entirely open source and the official builds have spyware included.

Thank you for saying this. For those who don't know about the open-source release of VSCode, check out https://vscodium.com/

I use VSCodium every day, and recommend it over VSCode to everyone, however, due to microsoft's locked down plugins, particulary the ones related to remote development and debug, there are certain things which can be done with VSCode and not VSCodium.

It's worth bearing in mind for those considering switching.

Re: Microsoft no longer signs Windows drivers for Process Hacker

#17

> Microsoft Process Explorer has the same functionality so they don't have standing to block competitors then go and include the exact same features in their own software. > Microsoft has been secretly adding more powerful features than Process Hacker via their SAC product – SAC has no security whatsoever by design – they're clearly targeting the project not because of any actual technical issues but rather because w…

> SAC

do you mean Special administration console? or Semi-annual channel?

Re: Microsoft no longer signs Windows drivers for Process Hacker

#18
post #17

> Microsoft Process Explorer has the same functionality so they don't have standing to block competitors then go and include the exact same features in their own software. > Microsoft has been secretly adding more powerful features than Process Hacker via their SAC product – SAC has no security whatsoever by design – they're clearly targeting the project not because of any actual technical issues but rather because w…

> SAC do you mean Special administration console? or Semi-annual channel?

Not sure, I'm quoting directly from the article.

Re: Microsoft no longer signs Windows drivers for Process Hacker

#19
post #3

Is there no way to run unsigned software on windows?

For drivers, I don’t think so. You can enable some boot settings that allow you to run unsigned drivers, for development purposes, but it will revert upon reboot, without anyway to enable it permanently.

Actually you can turn off enforcement if you want to. Requires a reboot and going into safe mode if I remember correctly. I have done it before when loading hacked drivers for old hardware, etc.

Re: Microsoft no longer signs Windows drivers for Process Hacker

#20

Earlier quoted context omitted.

Thank you for saying this. For those who don't know about the open-source release of VSCode, check out https://vscodium.com/

I use VSCodium every day, and recommend it over VSCode to everyone, however, due to microsoft's locked down plugins, particulary the ones related to remote development and debug, there are certain things which can be done with VSCode and not VSCodium. It's worth bearing in mind for those considering switching.

SSH FS, a third-party extension seems to work well with VSCodium: https://github.com/SchoofsKelvin/vscode-sshfs
Post reply on HN