Live data from Hacker News

Microsoft terminated the account VeraCrypt used to sign Windows drivers

sourceforge.net

41–50 of 526 posts

Re: Microsoft terminated the account VeraCrypt used to sign Windows drivers

#41
post #39

This is the same problem I'm currently facing with WireGuard. No warning at all, no notification. One day I sign in to publish an update, and yikes, account suspended. Currently undergoing some sort of 60 days appeals process, but who knows. That's kind of crazy: what if there were some critical RCE in WireGuard, being exploited in the wild, and I needed to update users immediately? (That's just hypothetical; don't f…

I am astounded that the maintainer and inventor of Wireguard is in this position.

Microsoft even supports Wireguard in Azure Kubernetes Service.

Re: Microsoft terminated the account VeraCrypt used to sign Windows drivers

#43
post #39

This is the same problem I'm currently facing with WireGuard. No warning at all, no notification. One day I sign in to publish an update, and yikes, account suspended. Currently undergoing some sort of 60 days appeals process, but who knows. That's kind of crazy: what if there were some critical RCE in WireGuard, being exploited in the wild, and I needed to update users immediately? (That's just hypothetical; don't f…

Now this is even more alarming! Wireguard's creator has their Microsoft account suspended...

Microsoft doesn't want to allow software that would allow the user to shield themselves, either by totally encrypting a drive, or by encrypting their network traffic!

Re: Microsoft terminated the account VeraCrypt used to sign Windows drivers

#46
post #37

Earlier quoted context omitted.

We can still install, right? It just comes up with a scary warning. Still not great but at least we aren't locked out.

You can, but it's more than a warning. VeraCrypt has a signed kernel driver, which has higher requirements. You'll need to boot into a special Windows mode and disable Driver Signature Enforcement.

Afaict, you can't disable driver signature enforcement permanently without disabling secure boot.

Re: Microsoft terminated the account VeraCrypt used to sign Windows drivers

#47
post #39

This is the same problem I'm currently facing with WireGuard. No warning at all, no notification. One day I sign in to publish an update, and yikes, account suspended. Currently undergoing some sort of 60 days appeals process, but who knows. That's kind of crazy: what if there were some critical RCE in WireGuard, being exploited in the wild, and I needed to update users immediately? (That's just hypothetical; don't f…

Y'all need to form an alliance or something, get some press coverage (wireguard, veracrypt, libreoffice)

Re: Microsoft terminated the account VeraCrypt used to sign Windows drivers

#48

Looks like Linux and some of the BSDs are the only remaining truly open OSes.

Except compulsory age verification in Linux is now becoming a real threat. Some Linux distros are actively against this but many are not seemingly interested in fighting it: CachyOS, Ubuntu, Fedora and others.

Age Verification is the thin end of a much bigger wedge in "open" OS's

Re: Microsoft terminated the account VeraCrypt used to sign Windows drivers

#49

Jesus, sourceforge is still on the go?

I understand that most people want to move to other more modern tools, it's up to you. However, what baffled me is why the author's choice not to move is a problem? Did we pay them to move and they did not move as promised? Was there some crowd funding to move that was not fulfilled?

Re: Microsoft terminated the account VeraCrypt used to sign Windows drivers

#50
post #24

I am somewhat also concerned that this software was still being distributed on SourceForge.

Yes, I stopped using SourceForge after they started tampering with installers to put adware inside of them.

It's a bit worrying that a sensitive app such as VeraCrypt is still distributed there.

Post reply on HN