Re: [Gimp-user] Update blocked by trend micro
+1 On 11/16/2021 5:06 PM, Kasim Ahmic via gimp-user-list wrote: That’s a completely false and baseless claim. The only software on my personal PC is free software, a large portion of which is open source as well. Trend Micro has never once blocked any of them from being installed. There’s a right way to make a point and then there’s what you’re doing which is throwing around baseless claims and flaming anyone and everyone that disagrees with your point of view. Please either just respond to the OP and help them with their issue or just stop responding. Sent from my iPhone On Nov 16, 2021, at 4:53 PM, Ruben Safir wrote: On 11/16/21 11:35, Kasim Ahmic wrote: For what it’s worth, I also use Trend Micro and have been very happy with it over the years. ugg - here come the testimonials defending a garbage piece of software that is not secure and blocks free software from being installed... the product really can't be defended. It has a decades old history of abject failure -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
On 11/16/21 23:34, Ruben Safir wrote: This is not a debate and I am not discussing this with you. You are definitely correct on that, at least as far as this mailing list is concerned - you have just been removed from it. Bye. -- Regards, Michael GPG: 96A8 B38A 728A 577D 724D 60E5 F855 53EC B36D 4CDD ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
“X software is bad because of some alleged observations I made and will not share with anyone for some reason. There is no need to question me for I know everything.” Ah yes, what a very reliable, provable, and definitely not inaccurate fact. You’ve convinced me, I will be uninstalling Trend Micro effective immediately. Oh wise one, will you please tell me what other software is bad? If nothing else, you’re at least good for a laugh. Everything from the likely false claims of experience, to the galavanting around the mailing list as if you know everything there is to know. You’re pretty entertaining pal. Sent from my iPhone > On Nov 16, 2021, at 5:46 PM, Ruben Safir wrote: > > On Wed, Nov 17, 2021 at 11:12:33AM +1300, Cliff Pratt via gimp-user-list > wrote: >> Do you have anything other than vague claims of guruship to back that up? >> > > > You mean like the OPs original post > > ?? > > ___ > gimp-user-list mailing list > List address:gimp-user-list@gnome.org > List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list > List archives: https://mail.gnome.org/archives/gimp-user-list ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
On Wed, Nov 17, 2021 at 11:12:33AM +1300, Cliff Pratt via gimp-user-list wrote: > Do you have anything other than vague claims of guruship to back that up? > You mean like the OPs original post ?? ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
On 11/16/21 17:06, Kasim Ahmic wrote: > That’s a completely false and baseless claim. this is like 1996 all over again There is no reasont no send me directly email that goes to the list. Please fix your mail client. Reuvain -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
On 11/16/21 17:06, Kasim Ahmic wrote: > Please either just respond to the OP OP - get rid of Trend Micro, and don't use Norton either. -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
On 11/16/21 17:06, Kasim Ahmic wrote: > That’s a completely false and baseless claim. Oh please, did someone offend your software? No - it is not a baseless claim or false. This is not a debate and I am not discussing this with you. I told you the facts based on thirty years of observation. There is no need for you to retort the facts. Reuvain -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
Do you have anything other than vague claims of guruship to back that up? I've worked with several brands of security software (including supporting some of them in corporate environments) and they all have their strengths and weaknesses. I've used TrendMicro, and don't remember anything distinctive about the brand. I've seen what happens when some idiot turns off their security software, and I've had to sort out the resultant mess. These days admins prevent users turning off their security software thank goodness. What exactly do you have against security software? Cliff On Wed, Nov 17, 2021 at 3:44 AM Ruben Safir wrote: > On Mon, Nov 15, 2021 at 11:37:09PM +0100, Michael Schumacher via > gimp-user-list wrote: > > On 15.11.21 22:55, Ruben Safir wrote: > > > > >On Mon, Nov 15, 2021 at 09:31:20PM +0100, Jernej Simončič wrote: > > >>On Monday, November 15, 2021, 13:31:01, Ruben Safir wrote: > > >> > > >>>In the last 40 years in the GNU field I have heard a lot of bad advise > > >>>but rarely as bad as this. Ignore this advise by Rick Strong and > > >>>ditch tend micro - ASAP. > > >> > > >>I kind of doubt that TrendMicro is the problem, > > > > > >Set aside with the doubts because they ARE the problem > > > > Ruben, I am pretty sure that the core issue in this thread is experience. > > > > > No - but I have the experience and you do not. > > The core issue is that trendmicro is not a reliable source of > security and is a bad actor. > > Nothing fixes that. > > ___ > gimp-user-list mailing list > List address:gimp-user-list@gnome.org > List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list > List archives: https://mail.gnome.org/archives/gimp-user-list > -- My Amazon author page : https://amazon.com/author/cliffpratt My Facebook author page : https://www.facebook.com/cliffprattauthor My Search on Kobo : https://www.kobo.com/search?query=Cliff+Pratt ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
That’s a completely false and baseless claim. The only software on my personal PC is free software, a large portion of which is open source as well. Trend Micro has never once blocked any of them from being installed. There’s a right way to make a point and then there’s what you’re doing which is throwing around baseless claims and flaming anyone and everyone that disagrees with your point of view. Please either just respond to the OP and help them with their issue or just stop responding. Sent from my iPhone > On Nov 16, 2021, at 4:53 PM, Ruben Safir wrote: > > On 11/16/21 11:35, Kasim Ahmic wrote: >> For what it’s worth, I also use Trend Micro and have been very happy with it >> over the years. > > > ugg - here come the testimonials defending a garbage piece of software > that is not secure and blocks free software from being installed... > > the product really can't be defended. It has a decades old history of > abject failure > > -- > So many immigrant groups have swept through our town > that Brooklyn, like Atlantis, reaches mythological > proportions in the mind of the world - RI Safir 1998 > http://www.mrbrklyn.com > DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 > > http://www.nylxs.com - Leadership Development in Free Software > http://www.brooklyn-living.com > > Being so tracked is for FARM ANIMALS and extermination camps, > but incompatible with living as a free human being. -RI Safir 2013 ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
On 11/16/21 11:35, Kasim Ahmic wrote: > For what it’s worth, I also use Trend Micro and have been very happy with it > over the years. ugg - here come the testimonials defending a garbage piece of software that is not secure and blocks free software from being installed... the product really can't be defended. It has a decades old history of abject failure -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
For what it’s worth, I also use Trend Micro and have been very happy with it over the years. As was stated previously, Trend Micro, like every other internet security software, can report some false positives from time to time and that may be what’s happening here. I saw mention here that this was a company machine though I can’t seem to find it now. If that is in fact the case, it may be that the security config is set a bit tighter than it otherwise would be. I would recommend a few things: 1. If this is a corporate machine, I recommend speaking with your Sys Admin team to see if it is okay to install the software first. Following that, ask them to review the file for any security vulnerabilities. 2. Trend Micro flagged the .part file which means that it was flagged before the file was fully downloaded and that might be causing some issues. As Liam suggested, re-downloading the file might solve this. 3. If Trend Micro flags it again, it seems that it quarantined the file which should mean that you can get the file back and run a security scan on it after it’s completely downloaded. If Trend Micro reports it as safe, you should be good to go. P.S: I did also just download the exe myself and ran a security scan on it. Trend Micro reported that it was fine though this isn’t a conclusive test as I think the GIMP website shuffles the mirrors used. Could be wrong on that Thanks, Kasim Ahmić > On Nov 16, 2021, at 9:44 AM, Ruben Safir wrote: > > On Mon, Nov 15, 2021 at 11:37:09PM +0100, Michael Schumacher via > gimp-user-list wrote: >>> On 15.11.21 22:55, Ruben Safir wrote: >>> >>> On Mon, Nov 15, 2021 at 09:31:20PM +0100, Jernej Simončič wrote: On Monday, November 15, 2021, 13:31:01, Ruben Safir wrote: > In the last 40 years in the GNU field I have heard a lot of bad advise > but rarely as bad as this. Ignore this advise by Rick Strong and > ditch tend micro - ASAP. I kind of doubt that TrendMicro is the problem, >>> >>> Set aside with the doubts because they ARE the problem >> >> Ruben, I am pretty sure that the core issue in this thread is experience. >> > > > No - but I have the experience and you do not. > > The core issue is that trendmicro is not a reliable source of > security and is a bad actor. > > Nothing fixes that. > > ___ > gimp-user-list mailing list > List address:gimp-user-list@gnome.org > List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list > List archives: https://mail.gnome.org/archives/gimp-user-list ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
On Mon, Nov 15, 2021 at 11:37:09PM +0100, Michael Schumacher via gimp-user-list wrote: > On 15.11.21 22:55, Ruben Safir wrote: > > >On Mon, Nov 15, 2021 at 09:31:20PM +0100, Jernej Simončič wrote: > >>On Monday, November 15, 2021, 13:31:01, Ruben Safir wrote: > >> > >>>In the last 40 years in the GNU field I have heard a lot of bad advise > >>>but rarely as bad as this. Ignore this advise by Rick Strong and > >>>ditch tend micro - ASAP. > >> > >>I kind of doubt that TrendMicro is the problem, > > > >Set aside with the doubts because they ARE the problem > > Ruben, I am pretty sure that the core issue in this thread is experience. > No - but I have the experience and you do not. The core issue is that trendmicro is not a reliable source of security and is a bad actor. Nothing fixes that. ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
On 15.11.21 22:55, Ruben Safir wrote: On Mon, Nov 15, 2021 at 09:31:20PM +0100, Jernej Simončič wrote: On Monday, November 15, 2021, 13:31:01, Ruben Safir wrote: In the last 40 years in the GNU field I have heard a lot of bad advise but rarely as bad as this. Ignore this advise by Rick Strong and ditch tend micro - ASAP. I kind of doubt that TrendMicro is the problem, Set aside with the doubts because they ARE the problem Ruben, I am pretty sure that the core issue in this thread is experience. A bit of background: Security is a process. For any kind of effective security measures, you have to go through at least a planning, and implementing and an operations stage. That means you collect the requirements you have, evaluate what solutions there are, which of them best suits your needs, decide which one you are going to use, then install and configure it to your needs, and then run it, update it, review its findings, keep yourself updated on any of its known issues, and so on. At every stage, you will learn a lot if you want to do them properly. BTW, I know that this is a rather rough and imprecise summary. Now, any of these stages can become arbitrarily short. Especially if you are not an employee at a company who gets paid for doing them and learning, but a user at home who follows the results of a "download antivirus" query in Google Search and clicks through the installer. If in doubt, you lack the time, motivation, and maybe the skills to do more than that, and an issue like that makes you hesitate. And then you ask people who may know more about the issue, for example people who are involved with and/or use the application your antivirus just flagged with a more or less cryptic message. What would you prefer to read as a reply: - a flat statement that the antivirus you are using is bad and you should use something else, without specifying what something would be good, and why? - and explanation of what may have happened, what can be done to examine if that was indeed the case, and potential remedies without changing your system more than necessary? It is a well-known fact that every antivirus software will occasionally find a so-called false positive, a file that is marked as containing a potential malware. Doing that makes none of them worse than any of its competition. You usually get a way to upload suspicious files to the vendor of the software to have it examined - this provides you with a report of what they found, and gives them an opportunity to improve the detection and avoid that same issue in future updates. Now, it is perfectly fine to keep up the statement that "they [TrendMicro] are the problem" *IF* you can add some verifiable/falsifiable facts to help others to determine this for themselves. This mailing list is not necessarily the best place to do so, however - I'd do this in a place where other security experts, including outspoken (but fair) critics of antivirus software, are around and can challenge your statement. If this was too much text, let me add one final fact: We know of no general issues of any specific antivirus solution and the GIMP installers. -- Regards, Michael GPG: 96A8 B38A 728A 577D 724D 60E5 F855 53EC B36D 4CDD ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
On Mon, Nov 15, 2021 at 09:31:20PM +0100, Jernej Simončič wrote: > On Monday, November 15, 2021, 13:31:01, Ruben Safir wrote: > > > In the last 40 years in the GNU field I have heard a lot of bad advise > > but rarely as bad as this. Ignore this advise by Rick Strong and > > ditch tend micro - ASAP. > > I kind of doubt that TrendMicro is the problem, Set aside with the doubts because they ARE the problem -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
On Monday, November 15, 2021, 13:31:01, Ruben Safir wrote: > In the last 40 years in the GNU field I have heard a lot of bad advise > but rarely as bad as this. Ignore this advise by Rick Strong and > ditch tend micro - ASAP. I kind of doubt that TrendMicro is the problem, given that I'm using it on my development machine (the one where GIMP installers are built and tested; it also runs at many of my company's clients, where I sometimes download and install GIMP). -- < Jernej Simončič ><><><><>< https://eternallybored.org/ > Large numbers of things are determined, and therefore not subject to change. -- Levy's First Law of the Disillusionment of the True Liberal ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
On Sun, Nov 14, 2021 at 03:22:42PM +0900, Joel Rees via gimp-user-list wrote: > On Sun, Nov 14, 2021 at 1:00 PM Baz Shaw wrote: > > > > Here is the report > > > > Report from Trend Micro antivirus during download: > > > > Time: 11/11/2021 16:36 > > File: gimp-2.20.28-setup.exe-part > > Threat: TSPY.Win32.TRX.XXPE50FSX016E0002 > > Action: Quarantined > > Putting quotes around that and doing a web search yields no results. > If Trend Micro has a specific record for this, they haven't published > it, or it's really new. > It is very important not to use trend micro for your security. That are not to be trusted. ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
On Sun, 2021-11-14 at 15:22 +0900, Joel Rees via gimp-user-list wrote: > On Sun, Nov 14, 2021 at 1:00 PM Baz Shaw wrote: > > > > File: gimp-2.20.28-setup.exe-part > > Threat: TSPY.Win32.TRX.XXPE50FSX016E0002 > > Action: Quarantined Since this is a partial download file, downloading again might give different results. -- Liam Quin - Paligo AB ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
On Sun, Nov 14, 2021 at 1:00 PM Baz Shaw wrote: > > Here is the report > > Report from Trend Micro antivirus during download: > > Time: 11/11/2021 16:36 > File: gimp-2.20.28-setup.exe-part > Threat: TSPY.Win32.TRX.XXPE50FSX016E0002 > Action: Quarantined Putting quotes around that and doing a web search yields no results. If Trend Micro has a specific record for this, they haven't published it, or it's really new. Best thing to do is contact them and see if they are willing to share what they have. This similar report on the language Go may shed some light for you, BTW: https://github.com/golang/go/issues/45191 Note the phrase "out of an abundance of caution". I would use other words, such as "lazy", but I don't know if that would or should put your mind at ease. You don't know me from Adam, and I don't regularly respond on this list. But I'll tell you what I go through when I prepare to install free/libre software: (1) Do I trust the developer(s)? If not, I don't even download. I go looking for another alternative. In the GIMP's case, I've been watching the community long enough to trust the developers enough to install it if i think it hasn't been tampered with. (2) So it comes down to detecting tampering. (2a) Is the download available on HTTPS servers? The URLs for the website for downloading the GIMP start with HTTPS, starting from here: https://www.gimp.org/downloads/ If it isn't showing you the download information for MSWIndows, you can click the button for MSWindows. (I assume you want that, since your URL ended in .exe.) HTTPS (as opposed to unencrypted HTTP) gives a fairly high degree of confidence that the owners and operators of the web site is who they say they are, and that what you download makes it to your computer safely. For many people it's enough. For me, it helps. In addition, if you have a torrent client, they provide a link for torrent download on the MSWindows version download page. Torrent download is a bit more secure than simple download, for what it's worth. (2b) Do they make checksums available? The GIMP makes checksums available, publishing the checksum for the MSWIndows download on the download page underneath the download buttons. The current checksum (SHA256) is 2c2e081ce541682be1abdd8bc6df13768ad9482d68000b4a7a60c764d6cec74e You can use the certutil.exe utility in MSWindows to check that from a shell or powershell window. The command is certutil -hashfile filename SHA256 I think. (I'll try to check tonight or later this week.) Substitute the name of the file, "gimp-2.10.28-setup.exe" for "filename", of course. Also, make sure you are in the download directory before you issue the command. Below the checksum, the site gives a link to VirusTotal, which you can use to check whether vendors are blacklisting this particular checksum. But if you do that, copy the entire checksum and use your search engine to go direct to VirusTotal and paste the checksum in. That way, in the very slight chance that you are seeing a spoof of the GIMP's website, you avoid the possibility of jumping to a spoofed VirusTotal, as well. I'm not sure how useful that information is, but some will find it useful. If you're worried that the download page is being spoofed by a man-in-the-middle, and that the checksum is faked, there is a way to get some confidence that is not the case. Run down the download page to the source code download section and find the link to the mirrors. Look through the list of mirrors and pick one at random. I happen to be familiar with the XMission mirror in the US, so I'll use that as an example. Search the web for XMission and note the URL. Open the site and copy the domain name: https://xmission.com Use right-click to copy (don't jump to) the link in the mirrors list: https://mirrors.xmission.com/ Note that the xmission.com domain name is the same. Now you can paste the domain name into the URL blank of your browser and go to their downloads section and be pretty sure your safe from everything but a look-ahead DNS poisoning. Drill down into the gimp section, into the gimp section of that, into the current version (2.10) and into the windows section of that. For the XMission mirror, the URL you end up at is https://mirrors.xmission.com/gimp/gimp/v2.10/windows/ From there, you can download the SHA256SUMS file, save it on your computer, open it with a text editor, and look at the line for gimp-2.10.28-setup.exe (the last line right now). Copy the checksum from the web page and paste it below that line like this: 2c2e081ce541682be1abdd8bc6df13768ad9482d68000b4a7a60c764d6cec74e gimp-2.10.28-setup.exe 2c2e081ce541682be1abdd8bc6df13768ad9482d68000b4a7a60c764d6cec74e and you can visually check that the checksums are the same. If you need even more assurance, try one or two more, and you have two or three witnesses that the checksum is valid. To recap, what I've walked you through is a way to get more than one witness that you got what the
Re: [Gimp-user] Update blocked by trend micro
Here is the report Report from Trend Micro antivirus during download: Time: 11/11/2021 16:36 File: gimp-2.20.28-setup.exe-part Threat: TSPY.Win32.TRX.XXPE50FSX016E0002 Action: Quarantined Sent from my iPhone > On Nov 13, 2021, at 7:42 PM, Joel Rees via gimp-user-list > wrote: > > On Fri, Nov 12, 2021 at 7:21 AM James Moe via gimp-user-list > wrote: >> >>> On 2021-11-11 15:02, Baz Shaw wrote: >>> >>> I just tried to download the latest update from >>> >>> https://download.gimp.org/mirror/pub/gimp/v2.10/windows/gimp-2.10.28-setup.exe >>> It was blocked by trend micro with this report: >>> >> Report was removed? > > It would be interesting to see the actual report. > >> Is "trend micro" a firewall product? > > Trend Micro is a Japanese company specializing cyber security, FWIW. > >> If so, you may need to whitelist gimp.org. > > Yeah. > > Or if Baz wants to be a little more sure that there is no > man-in-the-middle or DNS cache poisoning, explicitly identifying > mirrors and checking their stated checksums for the download against > the checksum he gets on what he downloaded can give a reasonable level > of confidence. When I do that, it takes me an hour or two of hunting > around the web for the mirrors and the checksums and digging up the > MSWindows command. > > (I've posted a page somewhere to remind myself and forgotten where I > posted it, so I usually end up looking for it on Microsoft's sites > again. FCIV is old news, BTW. Here's the command: > > certutil -hashfile filename MD5 > > or whatever. But SHA-1 is better than MD5.) > > -- > Joel Rees > > http://reiisi.blogspot.jp/p/novels-i-am-writing.html > ___ > gimp-user-list mailing list > List address:gimp-user-list@gnome.org > List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list > List archives: https://mail.gnome.org/archives/gimp-user-list ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
On Fri, Nov 12, 2021 at 7:21 AM James Moe via gimp-user-list wrote: > > On 2021-11-11 15:02, Baz Shaw wrote: > > > I just tried to download the latest update from > > > > https://download.gimp.org/mirror/pub/gimp/v2.10/windows/gimp-2.10.28-setup.exe > > It was blocked by trend micro with this report: > > > Report was removed? It would be interesting to see the actual report. > Is "trend micro" a firewall product? Trend Micro is a Japanese company specializing cyber security, FWIW. > If so, you may need to whitelist gimp.org. Yeah. Or if Baz wants to be a little more sure that there is no man-in-the-middle or DNS cache poisoning, explicitly identifying mirrors and checking their stated checksums for the download against the checksum he gets on what he downloaded can give a reasonable level of confidence. When I do that, it takes me an hour or two of hunting around the web for the mirrors and the checksums and digging up the MSWindows command. (I've posted a page somewhere to remind myself and forgotten where I posted it, so I usually end up looking for it on Microsoft's sites again. FCIV is old news, BTW. Here's the command: certutil -hashfile filename MD5 or whatever. But SHA-1 is better than MD5.) -- Joel Rees http://reiisi.blogspot.jp/p/novels-i-am-writing.html ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
Re: [Gimp-user] Update blocked by trend micro
On 2021-11-11 15:02, Baz Shaw wrote: > I just tried to download the latest update from > > https://download.gimp.org/mirror/pub/gimp/v2.10/windows/gimp-2.10.28-setup.exe > It was blocked by trend micro with this report: > Report was removed? Is "trend micro" a firewall product? If so, you may need to whitelist gimp.org. -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think. ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
[Gimp-user] Update blocked by trend micro
Hi and thank you for letting me join the group I just tried to download the latest update from https://download.gimp.org/mirror/pub/gimp/v2.10/windows/gimp-2.10.28-setup.exe It was blocked by trend micro with this report: So what do you suggest? Thanks Sent from my iPhone ___ gimp-user-list mailing list List address:gimp-user-list@gnome.org List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list List archives: https://mail.gnome.org/archives/gimp-user-list
