Live data from Hacker News

Deleting System32\curl.exe

daniel.haxx.se

41–50 of 136 posts

Re: Deleting System32\curl.exe

#41
post #38

Is there a windows equivalent of "chmod 0000 /file/to/be/made/unavailable" ? Even that seems pretty brutal but at least it's easily reversible if you discover that "oh I needed that to download the vendor patch that will _actually_ fix the problem"

Even more low-tech: I can't believe people just hose the executable (and immediately empty their recycle bin?) rather than just renaming it.

Re: Deleting System32\curl.exe

#42
post #2

People who delete system binaries due to whacky CVEs deserve a broken system. I don't even know who else to blame for this.

They deserve to not be allowed to restore their system to normal? > The people who deleted or replaced the curl executable noticed that they cannot upgrade because the Windows update procedure detects that the Windows install has been tampered with and it refuses to continue. This policy makes absolutely no sense.

It does make sense, as the upgrade may break the system because of the tampering. Probably say upfront that there's a problem and let the user do a full reinstall when they can rather than attempt to upgrade and break everything. They could have a "force upgrade" button, but many people would just click that without thinking twice then blame MS when it breaks everything.

Re: Deleting System32\curl.exe

#43

Earlier quoted context omitted.

You can't just disable this 'feature' from Vodafone? I'm in the UK and my ISP doesn't do this. I'm not sure why you would want your ISP interfering with your traffic like this. To me, it seems like a dealbreaker.

All UK ISPs do. It's very annoying trying to access sci-hub

All of the major ISPs and mobile networks do.

The UK government threatened to make it a legal requirement that all internet connections have filters for adult content on by default.

The major ISPs and mobile networks voluntarily put filtering in place by default to avoid the regulation.

The filters can usually be removed quite easily.

While there are some smaller ISPs that don't put filtering in place, they account for something like < 10% of the market.

Re: Deleting System32\curl.exe

#44
post #2

People who delete system binaries due to whacky CVEs deserve a broken system. I don't even know who else to blame for this.

They deserve to not be allowed to restore their system to normal? > The people who deleted or replaced the curl executable noticed that they cannot upgrade because the Windows update procedure detects that the Windows install has been tampered with and it refuses to continue. This policy makes absolutely no sense.

Strictly speaking the update process isn't able to update to the new version without the existing file (https://devblogs.microsoft.com/oldnewthing/20200213-00/?p=10...).

As noted on the blog post, the solution is to run the system file checker (sfc) to repair it before running the update

Re: Deleting System32\curl.exe

#46
CMD > run as admin > enter "sfc /scannow" without quotes then update should work again.

Next time anyone runs into a similar problem you might just want to zip the file before deleting it put a password if you AV still reports it. Or just get rid of your AV software it clearly su*ks if it reports legit system files.

Re: Deleting System32\curl.exe

#47

Vodaphone blocks this site for being “18+ content”, I guess because of “hacking” or something? There’s no explanation or option to report a false positive and they want you to put in credit card details to confirm your age to unlock it (I don’t need tips to get around this or anything, I can just connect to another network or use a VPN)

Wow. I’ve never seen this class of ISP censorship. Is this some sort of government mandated system or has Vodaphone taken it upon themselves to do this?

The UK government told ISPs to put the filtering in place voluntarily, or else the government would make a law requiring it.

All of the major ISPs and mobile networks now do it on a voluntary basis.

Re: Deleting System32\curl.exe

#48
post #9

Earlier quoted context omitted.

Two xx's. That's almost as bad as three, and surely heuristically naughty.

"heuristically naughty" may be my new favorite phrase.

I once (early 2000's, comparison shopping) used a heuristic that any video with a volume # greater than 7 was probably porn.

Doesn't work as well today, but there were surprisingly few false positives at the time.

Re: Deleting System32\curl.exe

#49

Earlier quoted context omitted.

They deserve to not be allowed to restore their system to normal? > The people who deleted or replaced the curl executable noticed that they cannot upgrade because the Windows update procedure detects that the Windows install has been tampered with and it refuses to continue. This policy makes absolutely no sense.

curl is used to download files… if it is missing, Windows presumably won’t be able to download something. If they just go for it anyway, the system could end up in some undefined state.

I doubt curl is involved in the windows update process itself (seeing as Windows Update is a lot older than the inclusion of curl in Windows)

Re: Deleting System32\curl.exe

#50
post #25

Antimalware is the worst malware I’ve seen in my decades-long career in IT.

I use whatever Microsoft call their built in security this year, use ublock origin, and reinstall Windows about once a year. This seems to be the better alternative to having Norton/McCafe/.
Post reply on HN