> On Jan 16, 2018, at 07:58, Bert Belder <[email protected]> wrote:
> 
> This "experimental installer" should not exist. Distributing an unsigned 
> executable is not a responsible thing to do. An installer for DLLs is a 
> ridiculous idea. And if anything installers should be an msi package not an 
> exe.
> 

It was added as a low-maintenance contribution. TBH I never used it myself nor 
we have numbers on its usage, so I guess asking the “should we dump it?” 
question is in order.

> On Mon, Jan 15, 2018 at 12:07 AM, Saúl Ibarra Corretgé <[email protected]> 
> wrote:
> Hi!
> 
> > On Jan 13, 2018, at 13:19, 'Sebastien Diot' via libuv 
> > <[email protected]> wrote:
> >
> > Hi,
> >
> > I've "discovered" libuv recently, and wanted to install the pre-built 
> > Windows version on my PC, to see if I can use it for my app.
> >
> > As a safety precaution, I checked the files on https://www.virustotal.com. 
> > Unfortunately, all the following files were flagged as "infected" by 
> > multiple anti-viruses:
> >
> >       • libuv-x86-v1.18.0.build20.exe
> >       • libuv-x64-v1.18.0.build20.exe
> >       • libuv-x86-v1.17.0.build19.exe
> >       • libuv-x64-v1.17.0.build19.exe
> 
> Well, that website (or rather, its upstreams) is plain wrong. Being a 
> platform abstraction library, libuv does access low-level stuff, now, how 
> that can qualify as “ransomware” is beyond me.
> 
> > I haven't gone farther back. Assuming the binaries are safe, maybe you 
> > could try to submit them to the appropriate anti-virus as "false positives”?
> >
> 
> These rebuild binaries were added because some Windows users wanted an easier 
> way to install it, but trying to play cat and mouse with some AV vendors is 
> not something many will be enticed to spend their free time on.
> 
> >
> >
> > One detection might be a fluke, but 3 is rather more than I'm comfortable 
> > with…
> >
> 
> Then I suggest you build it from source.
> 
> 
> Cheers,
> 
> --
> Saúl
> 
> --
> You received this message because you are subscribed to the Google Groups 
> "libuv" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to [email protected].
> To post to this group, send email to [email protected].
> Visit this group at https://groups.google.com/group/libuv.
> For more options, visit https://groups.google.com/d/optout.
> 
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "libuv" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to [email protected].
> To post to this group, send email to [email protected].
> Visit this group at https://groups.google.com/group/libuv.
> For more options, visit https://groups.google.com/d/optout.

--
Saúl

-- 
You received this message because you are subscribed to the Google Groups 
"libuv" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/libuv.
For more options, visit https://groups.google.com/d/optout.

Reply via email to