Live data from Hacker News

Microsoft terminated the account VeraCrypt used to sign Windows drivers

sourceforge.net

171–180 of 526 posts

Re: Microsoft terminated the account VeraCrypt used to sign Windows drivers

#171
post #65

Earlier quoted context omitted.

> No tinfoil needed. That's what Big Tinfoil wants you to believe!

Wait, what?! I was sure that the agenda of Big Tinfoil was to generate FUD so that we buy more tinfoil for our hats. Are you implying their agenda goes even deeper?

Have you tried to buy tin foil lately? Big Aluminum has taken over, and just see how far you get soldering the grounding strap to an aluminum foil hat.

Re: Microsoft terminated the account VeraCrypt used to sign Windows drivers

#172
post #39

This is the same problem I'm currently facing with WireGuard. No warning at all, no notification. One day I sign in to publish an update, and yikes, account suspended. Currently undergoing some sort of 60 days appeals process, but who knows. That's kind of crazy: what if there were some critical RCE in WireGuard, being exploited in the wild, and I needed to update users immediately? (That's just hypothetical; don't f…

Surprised to see you here. Thanks for all your hard work.

Windows users are in a tough spot, but with the dawn of Copilot, nobody should be surprised. Frankly, those who remain with Windows after this latest betrayal have chosen their fate.

Re: Microsoft terminated the account VeraCrypt used to sign Windows drivers

#173
post #40
post #4

It's like LibreOffice all over again: https://www.neowin.net/news/microsoft-bans-libreoffice-devel...

This is worrying on many levels. So Microsoft force you to create an account to use Windows and then they reserve the right to block you from your own account, thereby potentially making you lose access to all your OWN data. This is crazy and yet another reason to stop using Windows as soon as possible.

Correction: stop using Microsoft products as soon as possible.

Re: Microsoft terminated the account VeraCrypt used to sign Windows drivers

#175
post #21

Earlier quoted context omitted.

Just add code cert generation to letsencrypt, it's not like MS validates the code that you sign used certs from them anyway

What would be the point? How would you prevent malware from being signed? Currently, code signatures are used as a signal for trustworthiness of the code.

Only signal is that whoever is in the subject DN (highly) probably signed the code. There's 0 signal about trustworthiness of the code in the signature. Thrustworthiness signal is in the behavior/reputation of the signer.

Pretty sure there were historically a lot of apps that stole peoples contact lists and were signed properly. Certainly in the Android world.

Re: Microsoft terminated the account VeraCrypt used to sign Windows drivers

#176

We need a better way to sign and verify software. Clearly companies like Microsoft and Apple have not been good for the open source communities and are inhibiting innovation.

We need better OSes such that signing of software is not required to keep your computer safe.

GrapheneOS is doing lot of things right in this regard. Robust permission system adopted from AOSP and hardening by default in every imaginable way. Things like hardened malloc, storage scopes are excellent security features. Malware cannot do much even with the default settings.

Re: Microsoft terminated the account VeraCrypt used to sign Windows drivers

#177

Earlier quoted context omitted.

Note that signatures are not revoked retroactively when a certificate is revoked. You can still install previous releases.

With all the bugs and potential security flaws that are there and not fixable.

I don't know what to tell you, man. If you don't want bugs then don't use computers.

Re: Microsoft terminated the account VeraCrypt used to sign Windows drivers

#179
post #39

This is the same problem I'm currently facing with WireGuard. No warning at all, no notification. One day I sign in to publish an update, and yikes, account suspended. Currently undergoing some sort of 60 days appeals process, but who knows. That's kind of crazy: what if there were some critical RCE in WireGuard, being exploited in the wild, and I needed to update users immediately? (That's just hypothetical; don't f…

Encouraged by this thread, I tweeted about it: https://x.com/EdgeSecurity/status/2041872931576299888

Re: Microsoft terminated the account VeraCrypt used to sign Windows drivers

#180
post #143

Earlier quoted context omitted.

It is also a factual statement, that tinfoil shields (somewhat) from electromagnetic radiation.

But it is NOT necessarily a factual statement that one of the main uses of electromagnetic radiation is for humans to send information over long distances; nor that I first learned about tinfoil hats from some random piece of information that was being broadcast by means of electromagnetic radiation. It's just a vibe.

Yep.
Post reply on HN