Live data from Hacker News

Any sufficiently advanced uninstaller is indistinguishable from malware

devblogs.microsoft.com

91–100 of 556 posts

Re: Any sufficiently advanced uninstaller is indistinguishable from malware

#92
post #37

Earlier quoted context omitted.

I can't speak for whether Apple gets it right, but my experiences with the various package managers on Linux have not been any better than my experiences with installers on Windows. I've settled for avoiding system packages for anything I can build from source since system packages are always outdated and often Strange, and I try to avoid third party package sources and weird stuff like Snap or Flatpak since it's als…

I don't quite get this, I've been using Debian-esque Linux since like 1997 in various forms and have had problems with apt-get/apt maybe five times since then in total and it's always fixable with a little work. I've seen this a lot and I've haven't really understood the problems. I saw Linus from LTT brick his installation (in Pop_OS! I think?) but that was a clear user error.

>but that was a clear user error

A user error that can happen to any user who isn't Linux savvy and just wants to paly games, and not learn how a package manager works, and that it can uninstall your desktop environment if you aren't proficient with Linux, is no user error but OS error.

How many MacOS or Windows users expect that going through the installation steps of Steam, it can uninstall your desktop environment? For that user demographic, that is a clear OS issue.

Re: Any sufficiently advanced uninstaller is indistinguishable from malware

#93

Earlier quoted context omitted.

For those of us who don't Windows, can you explain what a detour is?

You essentially replace a function with your own. The project is at https://github.com/microsoft/Detours . I’ve created a PowerShell module that wraps this library to make it easier to hook functions on the fly for testing https://github.com/jborean93/PSDetour . For example I used it to capture TLS session data for decryption https://gist.github.com/jborean93/6c1f1b3130f2675f1618da5663... as well as create an strace…

> as well as create an strace like functionality for various Win32 APIs

Yes please. Thank you for this

Re: Any sufficiently advanced uninstaller is indistinguishable from malware

#95
post #94

Software shouldn't uninstall or update itself. There should be a package manager to do this. Then at least you have one attack vector less per application.

The upshot of a gated garden is that it is walled and gated. The downside is that it is walled and gated.

Re: Any sufficiently advanced uninstaller is indistinguishable from malware

#96
post #94

Software shouldn't uninstall or update itself. There should be a package manager to do this. Then at least you have one attack vector less per application.

And package manager provides hooks to run custom logic when uninstalling. Your arbitrary constraints doesn't solve the problem. Also system wide package manager almost never have the option to install easily multiple time the software.

Re: Any sufficiently advanced uninstaller is indistinguishable from malware

#98
post #91

Their Teams uninstaller isn't quite as good - it just doesn't uninstall all the crap that the Teams malware has left behind. I still have a stray MS Teams audio device left on my macOS machine.

Did you considered filling a bug report ?

Re: Any sufficiently advanced uninstaller is indistinguishable from malware

#100
post #20
post #3

And today I learned that Windows supports running Javascript as shell script. huh

It is very common for malware to contain java script payloads that try to obfuscate themselves like like this: Seemingly_random_code(seemingly_random_string) The seemingly_random_code decompresses/decodes whatever is in the seemingly_random_string and hands over control to it. Interestingly the decoded code is another version of the same with different code and string. This goes on for ~100 layers deep then at the en…

It’s amazing how much we haven’t moved on since iloveyou.txt.vbs
Post reply on HN