Brant Gurganus

Show:

What's happening?

  • First chance access violation for current stack trace.

    GTK+ 2.10.11 Glib 2.12.11 Gaim 2.00beta6 1. Run Application Verifier (free from Microsoft). 2. Add Gaim.exe. 3. Press Save. (some of the basic checks should be enabled by default). 4. Start gaim. Gaim will crash at startup and looking at the Application Verifier log, the cause was a first chance access violation for current stack trace. Log with stack trace follows. The help file...

    2007-03-23 04:25:46 UTC in Pidgin

  • Comment: security issue with installer

    No, what I am saying is this scenario: Assume Gaim has a network-accessible buffer overflow. Person is using Windows Vista where they are essentially always a limited user or using Windows XP primarily as a limitd user. Person begins a Gaim installation. As is necessary for installation, Windows Vista prompts for elevation or installer is manually elevated in Windows XP. Person runs Gaim at...

    2007-01-17 16:39:57 UTC in Pidgin

  • security issue with installer

    The installer currently offers to launch Gaim at the end of installation. Because the installer requires privelige elevation, particularly in Windows Vista but applicable to Windows XP as well, the Gaim launched at the end of installation is running in the administrator's account instead of a hopefully limited user account. The general technique for fixing this issue is having a wrapper...

    2007-01-11 14:25:07 UTC in Pidgin

  • digital signature for installer and distributed files

    I would like to see the installer and installed binaries digitally signed. Digital signatures help guarantee both integrity of the executable as well as authenticity. Since code signing certificates cost money, I have donated $20 toward this cause through the Register 7-zip link on the 7-zip site.

    2006-10-26 05:47:15 UTC in 7-Zip

  • signed installer

    The installer is not digitally signed. Digitally signing it helps ensure both authenticity and integrity.

    2006-10-23 14:23:01 UTC in NUnit .Net unit testing framework

  • redirection to start download should be removed

    Internet Explorer 7 and if I recall correctly Internet Explorer 6 SP2 block downloads triggered by redirections. This is how SourceForge.net currently starts downloads. As a click is needed to tell the browser that the download is okay, there is no convenience in using the redirection to start the download. I would suggest that the redirection to start the download part of the...

    2006-09-19 18:02:01 UTC in SourceForge.net

  • Comment: installer not digitally signed

    Logged In: YES user_id=558432 The reply from Thawte indicates that we can get a $100 discount making it $99 for 1 year or $299 for 2 year. I am thinking this is not low enough to pursue since it makes it the same price as the instantssl price range. If the person who would actually get the certificate wants to talk to the representative, it is riaanp at thawte dot com.

    2006-09-08 18:41:59 UTC in Pidgin

  • Comment: installer not digitally signed

    Logged In: YES user_id=558432 The message from Thawte would like to know whether the certificate would be purchased as an organization or as an individual. The indicate that the code signing certificates are only available to companies since the publisher of the code is shown as the organization. I will reply to them pointing them to this bug report for any response.

    2006-09-08 14:50:58 UTC in Pidgin

  • Comment: installer not digitally signed

    Logged In: YES user_id=558432 I sent a message to GoDaddy, and they responded that Microsoft's information about them offering code signing certificates is wrong. I am now checking with Thawte to see if they can offer some sort of discount for non-commercial and/or open source software.

    2006-09-08 01:25:10 UTC in Pidgin

  • Comment: installer not digitally signed

    Logged In: YES user_id=558432 GoDaddy provides free SSL certificates for open source and is listed as a root certificate provider for Authenticode with Microsoft, so I sent them a message asking if they had a similar free to open source program for Authenticode certificates.

    2006-09-07 12:05:33 UTC in Pidgin

About Me


Send me a message