updater.exe - Publisher Unknown

Talk about code development, features, specific bugs, enhancements, patches, and similar things.
Forum rules
Please keep everything here strictly on-topic.
This board is meant for Pale Moon source code development related subjects only like code snippets, patches, specific bugs, git, the repositories, etc.

This is not for tech support! Please do not post tech support questions in the "Development" board!
Please make sure not to use this board for support questions. Please post issues with specific websites, extensions, etc. in the relevant boards for those topics.

Please keep things on-topic as this forum will be used for reference for Pale Moon development. Expect topics that aren't relevant as such to be moved or deleted.
anon4218

updater.exe - Publisher Unknown

Unread post by anon4218 » 2018-04-19, 22:19

When you get an update for PaleMoon, you get a confirmation dialogue that isn't obvious as to what software is being updated (without expanding the details). I understand that the publisher information is not free, but would you be able to at least change the name of the executable to something like "palemoon-updater.exe" to make it more obvious as to what software is being updated?

New Tobin Paradigm

Re: updater.exe - Publisher Unknown

Unread post by New Tobin Paradigm » 2018-04-26, 05:03

If you searched the forum, you would know that due to reasons.. Binaries are no longer signed on Windows.

I could link you the topic but if you can't be bothered to look it up.. Neither can I.

Have a nice day.

User avatar
adesh
Board Warrior
Board Warrior
Posts: 1277
Joined: 2017-06-06, 07:38

Re: updater.exe - Publisher Unknown

Unread post by adesh » 2018-04-26, 05:30

Actually, the suggestion to rename "updater" executable is valid. But, it may be difficult to do so, that's why ...

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35477
Joined: 2011-08-28, 17:27
Location: Motala, SE
Contact:

Re: updater.exe - Publisher Unknown

Unread post by Moonchild » 2018-04-26, 09:26

The updater isn't launched without user interaction initiating the update process. So it would already be clear which updater is running.

If you don't trust the updating process because it's unsigned, then alternatively you can manually check for updates and download the installer to update that way -- and you can verify the installer with hash and PGP signature.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

Locked