Hi Vincent,

On Tue, May 15, 2018 at 1:15 AM <Vincent.Blondeau@lamresearch.com> wrote:

��

Hi!

��

I am using Pharo in a company network under a firewall, an antivirus, and windows, and each day I have an issue with some parts of the Pharo application that are recognized as a threat.�� So, I cannot download it or execute it straightforwardly.

��

Today was this one:

��

Another day was the Cairo Dll where a ���Veil Evasion Payload��� has been detected.

I agree, this is bad.

��

��

And some people has encounter the same kind of issues:

• https://github.com/OpenSmalltalk/opensmalltalk-vm/issues/152
• https://pharo.fogbugz.com/f/cases/20500/WindowsDefender-consider-SqueakSSL-dll-as-a-virus-and-delete-it

��

It seems that the solution is to sign the VM with Authenticode, but for this, one needs to acquire a certificate (which is, of course, not free).

Has the community such a certificate? Maybe the same that for MacOS?

No, we don't have such a certificate yet and we can't use the certificate from Apple because it can only be used for macOS VMs unfortunately.

��

Would someone configure the VM builds to automatically sign them? (I can spend some time for this if needed)

Of course, but first we need a certificate I'm afraid.

Cheers,

Fabio

��

��

TIA,

��

Cheers,

Vincent

��