From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lucy.dinwoodie.org (77.116.2.81.in-addr.arpa [81.2.116.77]) by sourceware.org (Postfix) with ESMTPS id 1F925385841D for ; Wed, 26 Jan 2022 08:47:29 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 1F925385841D Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=dinwoodie.org Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=dinwoodie.org Received: from adam by lucy.dinwoodie.org with local (Exim 4.94.2) (envelope-from ) id 1nCdxd-0005LU-4J; Wed, 26 Jan 2022 08:47:25 +0000 Date: Wed, 26 Jan 2022 08:47:25 +0000 From: Adam Dinwoodie To: "Buchbinder, Barry (NIH/NIAID) [E]" Cc: "cygwin@cygwin.com" Subject: Re: [ANNOUNCEMENT] Updated: setup (2.917) Message-ID: <20220126084725.tguohvzaiq2duepc@lucy.dinwoodie.org> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Spam-Status: No, score=-0.9 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS, PDS_RDNS_DYNAMIC_FP, RDNS_DYNAMIC, SPF_HELO_PASS, SPF_PASS autolearn=no autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org X-BeenThere: cygwin@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: General Cygwin discussions and problem reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Jan 2022 08:47:30 -0000 On Tue, Jan 25, 2022 at 10:33:52PM +0000, Buchbinder, Barry (NIH/NIAID) [E] via Cygwin wrote: > On Mon, Jan 24, 2022 at 6:12 PM Bill Stewart wrote: > > > >On Mon, Jan 24, 2022 at 3:49 PM Buchbinder, Barry (NIH/NIAID) [E] via Cygwin wrote: > > > >Windows protected your PC > >> Microsoft Defender SmartScreen prevented an unrecognized app from starting. > >> Running this app might put your PC at risk. > >> > > > >Not to state the obvious, but this means that the Microsoft antivirus program prevented it from running. > > > >Exclude it. > > I have no control over the antivirus, so cannot exclude it. > > The point was that this wasn't a problem with 2.915, so most likely is the result of some change made in 2.917. > > However, this morning, after a reboot, it seems to work OK. The difference was entirely that the new setup installer was new. Microsoft Defender SmartScreen learns what programs are safe by seeing how many people download and use them, on the basis that things that are downloaded by lots of people and don't become known as a specific threat should be fine, whereas something unknown may well be some new malware. This flag doesn't indicate there's anything about 2.917 that had changed to worry about, only that it had changed and that you were one of the first to try to use it. If you don't have the ability to override the spurious warning, your only options will be to wait longer before using the new version, so SmartScreen has a chance to learn it's safe from people who can click past the warning, or to take it up with whoever manages your systems. There is nothing the Cygwin project folks could do to help other than never release new software. There's a bit more information on the "reputation" checking under "How Microsoft Defender SmartScreen works when a user tries to run an app" at https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-set-individual-device (For the sake of explicitness, I am a Microsoft employee these days, but SmartScreen is nothing to do with my role at Microsoft, and Cygwin is at best tangential. I don't have any more knowledge or influence in this area than any non-employee.) Adam