Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

WireGuard makes new Windows release following Microsoft signing resolution

lists.zx2c4.com

Post reply on HN
Print view View original

161–170 of 175 posts

Re: WireGuard makes new Windows release following Microsoft signing resolution

#161

Post by noAnswer »

c0l0 wrote: post #142
NetMageSCW wrote: post #74

Earlier quoted context omitted.

While this is a small problem for software (and hardware) that needs custom kernel drivers, or software that needs to run as administrator, you seem to have jumped a long way past that to rant about FOSS on Windows with no justification- general unsigned software works just fine on Windows as it always has.

"works just fine on Windows as it always has" is just not true. These days, I cannot even run my own cross-compiled Go executables of a cross-platform tool that I am developing in private on Windows 10 or 11, because some blue popup from Windows Defender/"SmartScreen" prevents me from doing so, and tells me to contact the software publisher if I'd like to be able to do something about it. Outright disabling Defender/…

Do you download the cross-compiled executable via http or smb to the Windows machine? If so than it most likely got earmarked with a NTFS alternate data stream.

File Settings > This file come from another computer: Unblock

PowerShell > Unblock-File

Add your smb file share as trusted: Internet Properties > Security > Local Intranet > Sites

I hate it too that you need to sign software that you want to publish. Totally destroys the economics of little shareware type software.

Re: WireGuard makes new Windows release following Microsoft signing resolution

#162

Post by izacus »

john_strinlai wrote: post #92
izacus wrote: post #76

Earlier quoted context omitted.

Except that the system that removes culpability, visibility and consequences of this kind of abuse is set up deliberately to avoid liability and consequences of such actions. This isn't a tee-hee accident, this is deliberate organizational design which removed any kind of bad consequences or even thought about what the software does to user from the engineers at Microsoft. They're happy about that. They now don't nee…

and even with all of that in mind, this was not a coordinated microsoft attack against wireguard. which was my point. i am in no way defending microsoft. just pointing out that the conspiracy-theorists suggesting that some exec at microsoft specifically targeted wireguard for whatever nefarious purpose was, well, a conspiracy.

You're trying to make a difference where there is none. Yes, they didn't say "we'll attack wireguard". They said "we'll setup our processes so apps like will end up being abused to save us effort", which is the same, just packaged into bureaucracy.

It's kind of bizarre how y'all pretend that systematic bearocratic evil doesn't exist. After being brainwashed about its evils in USSR for your young live.

Re: WireGuard makes new Windows release following Microsoft signing resolution

#163

Post by AnthonyMouse »

berdario wrote: post #146
defrost wrote: post #138

Earlier quoted context omitted.

Are you thinking of a single five letter word, two words of three and two letters, or an entire sentence that only uses 5 distinct letters? Consider being less cryptic, for the sake of those with English as a fourth language.

(also a non-native speaker here, mildly annoyed by the obscure joke from GP) Wordplay are exactly the kind of stuff that LLMs excel at, so I asked Gemini flash, and I got > snarky play on words by suggesting that the answer to AnthonyMouse's question is "Money." > Here is the breakdown of how they arrived at that: > The Username: AnthonyMouse > The Letters: The word "Money" can be formed using the letters found in M-…

LLMs give you the boring (i.e. statistically probable) answer. You could probably get it to say "money" almost regardless of what the original question was because it's so generic. It might even say that for a name without all the right letters.

Let's save a tree and ask bash:

$ grep ^.....$ /usr/share/dict/words|grep -i ^[AnthonyMouse]*$

From the more than 300 possibilities we can then consider the context. We're talking about Microsoft here, and the problem suggests we're the sort of people who expect anagrams to have secret meaning, so we should prefer an answer implying some kind of conspiracy or kabbalistic nonsense. The obvious candidates are therefore mason and Satan. Between these, Satan would require reusing a letter the candidate set only has once, and one of the other words on the list was stone. We can form two five letter words if we're allowed to reuse letters and thereby get stone mason.

This is the most irrefutable possible proof that we're being pointed to a masonic conspiracy rather than Microsoft's usual popular association with the antichrist.

Re: WireGuard makes new Windows release following Microsoft signing resolution

#164

Post by golem14 »

Root_Denied wrote: post #157
golem14 wrote: post #97

Since the impact of the account is presumably known to Microsoft (through telemetry etc), they probably know when these accounts get turned off, and can mark them in case the owner comes back and tries recovery. Microsoft would not have to automatically and 100% correctly reinstate the account. The goal would be to get high level cases like this one in front of a knowledgable human before the locked account posts ang…

The reality is that unless and until the PR hit from failures like this impact their stock price or their bottom line, companies won't care to fix the processes that created them.

I don't know it's that clear cut. A constant drip of bad stories does hurt the reputation over time, and it's hard to get it back.

But I agree - in the moment, the impact is barely visible, so management would have to put up a fight to spend $$$ on a fix. The way of least resistance is to issue a press release as shown above.

Re: WireGuard makes new Windows release following Microsoft signing resolution

#165

Post by Barbing »

defrost wrote: post #138
Barbing wrote: post #137

Earlier quoted context omitted.

all five letters of that answer are in your username :)

Are you thinking of a single five letter word, two words of three and two letters, or an entire sentence that only uses 5 distinct letters? Consider being less cryptic, for the sake of those with English as a fourth language.

Sorry, that was yesterday's HN Wordle! (that's the New York Times-acquired wordplay game Wordle, quite the popular wordplay game--just joking that I created a word game of my own)

Useless reflection to ignore below (forewarned!)

I hesitated to post; in the end, the value of the comment was so low, I expected non-wordplay-fans to scroll past and lose nothing, so I left it in the hopes at least one person would find the answer themselves and be pleased about it.

thanks

Re: WireGuard makes new Windows release following Microsoft signing resolution

#166

Post by Barbing »

berdario wrote: post #146
defrost wrote: post #138

Earlier quoted context omitted.

Are you thinking of a single five letter word, two words of three and two letters, or an entire sentence that only uses 5 distinct letters? Consider being less cryptic, for the sake of those with English as a fourth language.

(also a non-native speaker here, mildly annoyed by the obscure joke from GP) Wordplay are exactly the kind of stuff that LLMs excel at, so I asked Gemini flash, and I got > snarky play on words by suggesting that the answer to AnthonyMouse's question is "Money." > Here is the breakdown of how they arrived at that: > The Username: AnthonyMouse > The Letters: The word "Money" can be formed using the letters found in M-…

Thanks for doing the legwork :) my b

https://news.ycombinator.com/item?id=47735828

Re: WireGuard makes new Windows release following Microsoft signing resolution

#167

Post by Barbing »

AnthonyMouse wrote: post #163
berdario wrote: post #146

Earlier quoted context omitted.

(also a non-native speaker here, mildly annoyed by the obscure joke from GP) Wordplay are exactly the kind of stuff that LLMs excel at, so I asked Gemini flash, and I got > snarky play on words by suggesting that the answer to AnthonyMouse's question is "Money." > Here is the breakdown of how they arrived at that: > The Username: AnthonyMouse > The Letters: The word "Money" can be formed using the letters found in M-…

LLMs give you the boring (i.e. statistically probable) answer. You could probably get it to say "money" almost regardless of what the original question was because it's so generic. It might even say that for a name without all the right letters. Let's save a tree and ask bash: $ grep ^.....$ /usr/share/dict/words|grep -i ^[AnthonyMouse]*$ From the more than 300 possibilities we can then consider the context. We're ta…

>it's so generic.

Can only be one root of all evil, I suppose :)

Re: WireGuard makes new Windows release following Microsoft signing resolution

#168

Post by Barbing »

jstanley wrote: post #153
Barbing wrote: post #137

Earlier quoted context omitted.

all five letters of that answer are in your username :)

So that narrows it down to about 300 possibilities. https://gist.github.com/jes/bbdad4c6e54ffa120f62cd443ded8d8f Plausible candidates include "asset", "enemy", "homes", "mates", "moats", "money", "nasty", "state", "stunt".

Awesome

(467 on macOS Sequoia it seems)

Re: WireGuard makes new Windows release following Microsoft signing resolution

#169

Post by defrost »

Barbing wrote: post #165
defrost wrote: post #138

Earlier quoted context omitted.

Are you thinking of a single five letter word, two words of three and two letters, or an entire sentence that only uses 5 distinct letters? Consider being less cryptic, for the sake of those with English as a fourth language.

Sorry, that was yesterday's HN Wordle! (that's the New York Times-acquired wordplay game Wordle, quite the popular wordplay game--just joking that I created a word game of my own) Useless reflection to ignore below (forewarned!) I hesitated to post; in the end, the value of the comment was so low, I expected non-wordplay-fans to scroll past and lose nothing, so I left it in the hopes at least one person would find th…

No drama, I don't mind a puzzle or oblique reference. I'm also a grandparent and spend too much time on pointing out that what one person is thinking of isn't always the same as what another is, and that there's often yet another way of looking at a statement.

I liked your comment, I guessed the word, and had fun pointing out ambiguities at play.

Re: WireGuard makes new Windows release following Microsoft signing resolution

#170

Post by Xiaoher-C »

The code-signing problem on Windows is fundamentally asymmetric. WireGuard survived because it was visible enough that losing signing became embarrassing for Microsoft. Most projects aren't. They just quietly stop working and nobody notices except the users.

This situation got fixed because of an HN thread. That's a terrible way to maintain software infrastructure. You shouldn't need to go viral to keep your project running on a major OS.

The underlying problem isn't going away unless there's either regulatory pressure or a credible community attestation model that bypasses the single-CA trust structure. Microsoft has no obvious incentive to build that themselves.

Post reply on HN