Path: csiph.com!optima2.xanadu-bbs.net!xanadu-bbs.net!eternal-september.org!feeder.eternal-september.org!mx02.eternal-september.org!.POSTED!not-for-mail From: rickman Newsgroups: comp.lang.forth Subject: Re: bug in VFX --- IF does't work Date: Mon, 06 Jul 2015 12:47:14 -0400 Organization: A noiseless patient Spider Lines: 67 Message-ID: References: <2e398151-3bb9-4827-8b25-2065117703f1@googlegroups.com> Mime-Version: 1.0 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Injection-Date: Mon, 6 Jul 2015 16:45:56 +0000 (UTC) Injection-Info: mx02.eternal-september.org; posting-host="ebddd0a34a37eb1d7028213a8f3d0ba6"; logging-data="24929"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+2ymgst+9ynxEgEmmR5C0Z" User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 In-Reply-To: Cancel-Lock: sha1:7qj/bmD+fPsgDh6sjxI1nHSHs3A= Xref: csiph.com comp.lang.forth:40367 On 7/6/2015 4:45 AM, Mark Wills wrote: > On Sunday, 5 July 2015 17:21:59 UTC+1, rickman wrote: >> On 7/5/2015 9:23 AM, Bernd Paysan wrote: >>> Alex McDonald wrote: >>>> I have been doing what you suggest and helping people round this issue >>>> since 2011; for example >>>> https://groups.google.com/forum/#!topic/comp.lang.forth/rYIjser2UQQ. >>> >>> Virus scanners are scareware and snake oil. False positives happen again >>> and again, and sometimes, even parts of a normal Windows install is detected >>> as malware (probably for good reasons ;-), and quarantined. Doh. >>> >>> I usually submit my generated setup.exes and Windows tarballs to >>> virsustotal.com, which uses all available scan engines. The problem: I do >>> this when I generated the file. False positives come and go. >>> >>> At Dialog, I had a problem with bigForth and the F-Secure scanner Dialog >>> used. It just ate the bigForth executable, a very small launcher. They >>> requested that launcher and whitelisted it as workaround. However, despite >>> the launcher code itself never changes, there's a timestamp in it, which >>> does change. Each time I recompile, F-Secure would eat the new file again. >>> We helped ourselves by adding an exception rule for the bigForth directory; >>> it was surprisingly easy (and if I would write malware, I would probably do >>> just that: first add an exception rule, and then download the actual >>> malicious code). >>> >>> Currently, everything seems to be fine with Gforth and bigForth. >>> >>> My suggestion for anybody seeing a suspicious file is to submit it to >>> Virustotal. If it's only your anti-virus program which detects something, >>> it is very likely a false positive. >>> >>> If you are scared by your scareware, you should get a better understanding >>> what this kind of software is actually doing, and why it's one of the most >>> stupid things in security. It's #2 of the dumbest things in computer >>> security according to this rant: >>> >>> http://www.ranum.com/security/computer_security/editorials/dumb/ >> >> I remember being in graduate school and talking to one of the foreign >> students studying control theory. They were working in the lab with a >> motor simulator which they could control with a motor controller they >> were developing. When they connected it to a real motor it didn't work >> properly. He said they were trying to figure out what was wrong with >> the motor! Maybe this was a language barrier thing, I don't know, but >> clearly the motor is "correct" by definition. >> >> In this case the Forth program is not a virus, so I'm pretty sure the >> virus detection software is reporting a false positive and needs to be >> fixed, not the Forth. >> >> -- >> >> Rick > > Indeed. Ching and Alex are getting pissed off with each other in another > thread. A shame, as I get the impression both sides are mis-interpreting > the other side due to language barrier issues. I think the communication has been keeping it at a lower level. From what I have read Ching is just plain being offensive with no useful purpose intended. The really weird part is that he keeps posting, complaining that others keep replying to his posts. -- Rick