Red Gate forums :: View topic - Unsigned update exe?
Return to www.red-gate.com RSS Feed Available

Search  | Usergroups |  Profile |  Messages |  Log in  Register 
Go to product documentation
.Net Reflector 6.x and .NET Reflector 6.x Pro
.Net Reflector 6.x and .NET Reflector 6.x Pro forum

Unsigned update exe?

Search in .Net Reflector 6.x and .NET Reflector 6.x Pro forum
This forum is locked: you cannot post, reply to, or edit topics.   This topic is locked: you cannot edit posts or make replies.
Jump to:  
Author Message
Rene



Joined: 13 Feb 2010
Posts: 2

PostPosted: Sun Oct 03, 2010 8:50 pm    Post subject: Unsigned update exe? Reply with quote

I was prompted by reflector to see if I wanted to automatically update to the latest version. I clicked yes and then I was asked by Windows if I really wanted to run a potentially unsafe exe.

Perhaps I am wrong (I should have taken a closer look) but I donít think that the update exe was singed, if I am correct about the update exe not being singed then that just shows how little you guys care about protecting your customers. If I am wrong and the update exe is indeed signed then disregard this email.

I donít care if the exe is being downloaded from your site, there is absolutely no reason why not to sign an exe no matter what that exe does.
Back to top
View user's profile Send private message
Bart Read



Joined: 31 Mar 2005
Posts: 978
Location: Cambridge, UK

PostPosted: Tue Oct 05, 2010 12:07 pm    Post subject: Reply with quote

Hi Rene,


The executable that Windows is warning you about isn't downloaded. It's actually embedded in reflector.exe itself and extracted at runtime to allow Reflector to update itself once it's downloaded the new zip file.

I agree that it's an annoyance that the updater exe isn't signed, and one that we should definitely fix, however reflector.exe itself is signed, as is the zip file that you (or Reflector) downloads from the website. This means that if the updater exe was modified it would break the signature on reflector.exe and therefore I think it's a bit strong to suggest that we don't care about protecting our customers.

I hope this information is helpful. We will try to get it fixed in the near future.


Many thanks,


Bart
_________________
Bart Read
Principal Consultant
bartread.com Ltd
Back to top
View user's profile Send private message
Bart Read



Joined: 31 Mar 2005
Posts: 978
Location: Cambridge, UK

PostPosted: Tue Oct 05, 2010 3:38 pm    Post subject: Reply with quote

Hi again,


Having consulted one of the other devs here it turns out we've already fixed this in .NET Reflector 6.5 but obviously you wouldn't have seen that when upgrading from an earlier version because the updater exe is extracted from whatever version you're currently running. Anyway, what I can say is that next time you update, either manually or automatically, you should no longer see this warning.

I hope that helps.


Thanks,


Bart
_________________
Bart Read
Principal Consultant
bartread.com Ltd
Back to top
View user's profile Send private message
Display posts from previous:   
This topic is locked: you cannot edit posts or make replies. All times are GMT + 1 Hour
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group