Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NFCGate flagged as malware even after multiple followups saying it isn't

github.com

Post reply on HN
Print view View original

11–17 of 17 posts

Re: NFCGate flagged as malware even after multiple followups saying it isn't

#11

Post by arccy »

jonathantf2 wrote: post #7
kotaKat wrote: post #4

Earlier quoted context omitted.

False detection is a nightmare in the corporate world and this IT worker bashes his head every time he runs across it. Nirsoft tools? Bam, "virus" and "malware". How dare you! Tailscale website? Uh-oh, ZScaler thinks that's a "remote access tool" so you're being given a click-through formal warning! The Framework website? Uh-oh, .work is a bad TLD! Can't browse to that, it could be evil!

I mean - Tailscale is a remote access tool...

got to prevent you from looking at competitors

Re: NFCGate flagged as malware even after multiple followups saying it isn't

#12

Post by [deleted] »

kotaKat wrote: post #4
chrisandchris wrote: post #2

This reminds me of may of one of my favourite piece of software, Mail PassView, which is (AFAIK) considered Malware bei Windows/Defender because it shows you the passwords you entered yourself in Outlook (but forgot to write down somehwere). Flagging Malware is hard, and research/dev tools are always behaving at least similar to Malware (because we want to get data/do stuff regular users won't do).

False detection is a nightmare in the corporate world and this IT worker bashes his head every time he runs across it. Nirsoft tools? Bam, "virus" and "malware". How dare you! Tailscale website? Uh-oh, ZScaler thinks that's a "remote access tool" so you're being given a click-through formal warning! The Framework website? Uh-oh, .work is a bad TLD! Can't browse to that, it could be evil!

[deleted]

Re: NFCGate flagged as malware even after multiple followups saying it isn't

#13

Post by SpicyLemonZest »

stavros wrote: post #3
chrisandchris wrote: post #2

This reminds me of may of one of my favourite piece of software, Mail PassView, which is (AFAIK) considered Malware bei Windows/Defender because it shows you the passwords you entered yourself in Outlook (but forgot to write down somehwere). Flagging Malware is hard, and research/dev tools are always behaving at least similar to Malware (because we want to get data/do stuff regular users won't do).

But the main characteristic of malware is that it works for someone other than the user, no? Research software works for the user themselves.

Ehh. The only structural gap from a local password logger to a universal account takeover is whether you’re receptive to nice men who explain that they’d like you to send them a “log file”. Working on a user’s behalf has to include protecting them from security holes they might not expect.

Re: NFCGate flagged as malware even after multiple followups saying it isn't

#15

Post by butvacuum »

shakna wrote: post #10
butvacuum wrote: post #9

Earlier quoted context omitted.

And something using keystroke injection to abuse the exception?

Is called an automation tool. Like Powershell, or Microsoft Automate or Tosca, who can all run keystroke injection, but aren't flagged.

My question was rhetorical and intended to point out that granting an exception for 'good' software to do a bad thing is just allowing bad actor to do the bad thing.

Then, when the exception has to be revoked, the backlash is massive. Look up the recent example of the driver FanControl used to issue SMBus commands being blacklisted.

Re: NFCGate flagged as malware even after multiple followups saying it isn't

#16

Post by shakna »

butvacuum wrote: post #15
shakna wrote: post #10

Earlier quoted context omitted.

Is called an automation tool. Like Powershell, or Microsoft Automate or Tosca, who can all run keystroke injection, but aren't flagged.

My question was rhetorical and intended to point out that granting an exception for 'good' software to do a bad thing is just allowing bad actor to do the bad thing. Then, when the exception has to be revoked, the backlash is massive. Look up the recent example of the driver FanControl used to issue SMBus commands being blacklisted.

I was pointing out that keystroke injection is already the norm. The exception is banning it for some software.

It has been the norm since we first started automating processes designed more for people than automation. It will remain the norm for as long as that exists.

Re: NFCGate flagged as malware even after multiple followups saying it isn't

#17

Post by DiabloD3 »

ttoinou wrote: post #14

I have the same problem because my installer uses NSIS. And once my DLL also was flagged as a virus / malware even though it's completely legit :/ , everything is signed properly. Anyone knows how to improve this situation ?

Yes: stop using Windows.
Post reply on HN