QIDITECH / QIDI_Q1_Pro

GNU Affero General Public License v3.0
36 stars 5 forks source link

Virus warning with 4.4.15 klipper update #1

Open jleadbetter opened 5 months ago

jleadbetter commented 5 months ago

I'm getting a virus warning in Chrome and Windows Defender when downloading the 4.4.15 release. To say this is worrisome is an understatement.

CChen616 commented 5 months ago

We've checked the files and they're safe. These warnings can pop up with certain types of files or newer downloads. Feel free to double-check with other antivirus software if you're still unsure.

CChen616 commented 5 months ago

Just a heads up, the update package includes components intended for use with QIDI Link, which might be flagged by antivirus software as high risk or potentially malicious. However, these components are safe and will not harm your computer. They are designed to run on the printer only after the update is installed.

xTremePower commented 5 months ago

Hello, can you explain me this joke ?!!

I own 4 Qidi, but in the max 3 firmwares no problem detected, in the Q1 no matter how i try, always show this

Capture d'écran 2024-04-05 213150

xTremePower commented 5 months ago

Just a heads up, the update package includes components intended for use with QIDI Link, which might be flagged by antivirus software as high risk or potentially malicious. However, these components are safe and will not harm your computer. They are designed to run on the printer only after the update is installed.

Hello, Okay maybe, but I really have big trouble to trust someone who say me, don't wory it's a fake positive, just let it run, it's safe ...

ShootLessDie commented 5 months ago

Hello, I am also getting this virus warning in addition to the one in the screenshot above. Please fix. image

CChen616 commented 5 months ago

It's hard to remove the warning, so for those who are still concerned about the security alert, here is a temporary workaround:

  1. Log into the printer's system using an SSH tool such as MobaXterm. username: root passwd: makerbase
  2. Download this zip file, then use the SSH tool to upload the extracted files to the system. auto_update.zip
  3. Change working directory to where the files are using cd command, for example:
    cd /home/mks

    and run the provided command.

    bash auto_update.sh
  4. After a while, you should see the screen begin to flash as the update proceeds. Wait for the update to complete.

The zip file utilizes an automatic update component introduced in version 4.4.15. After updating to this version, you can use the automatic update feature on the screen to update, bypassing the need to download the update package.

The update process requires an internet connection. For users without network access in their printing environment, it is still recommended to add the downloaded update package to the whitelist of your security software.

greg9504 commented 2 months ago

I have version 4.4.16 firmware installed (factory). When I run autoupdate I get "Failed to obtain online version information." Error. Printer is connected to wifi and has access to internet. I can not download the latest firmware because it is immediately flagged as having a virus.

CChen616 commented 2 months ago

If you can access the printer through Qidi Link but cannot update online, it is likely because the printer's system time is not synchronized, causing SSL certificate verification with the remote server to fail.

You can try using an SSH tool (I recommend Mobaxterm) to enter the printer system and run the following commands:

# username: mks
# password: makerbase
sudo apt-get remove --purge chrony
sudo systemctl start systemd-timesyncd
sudo systemctl enable systemd-timesyncd
sudo timedatectl set-ntp true
# set timezone
dpkg-reconfigure tzdata 

to synchronize the time.

Alternatively, you can add the update package to your antivirus software's whitelist.

greg9504 commented 2 months ago

Hello @CChen616,

The second command failed

mks@mkspi:~$ sudo apt-get remove --purge chrony
[sudo] password for mks:
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages will be REMOVED:
  chrony*
0 upgraded, 0 newly installed, 1 to remove and 230 not upgraded.
After this operation, 0 B of additional disk space will be used.
Do you want to continue? [Y/n]
(Reading database ... 147811 files and directories currently installed.)
Purging configuration files for chrony (3.4-4+deb10u2) ...
Processing triggers for systemd (241-7~deb10u8) ...
mks@mkspi:~$ sudo systemctl start systemd-timesyncd
Sorry, user mks is not allowed to execute '/usr/bin/systemctl start systemd-timesyncd' as root on mkspi.
mks@mkspi:~$

I then tried without sudo, the commands seemed to work but time/date is still wrong

Last login: Sat Oct 28 00:21:00 2023 from 192.168.1.18
-bash: service: command not found
mks@mkspi:~$ systemctl start systemd-timesyncd
mks@mkspi:~$ sudo systemctl enable systemd-timesyncd
[sudo] password for mks:
Sorry, user mks is not allowed to execute '/usr/bin/systemctl enable systemd-timesyncd' as root on mkspi.
mks@mkspi:~$ systemctl enable systemd-timesyncd
==== AUTHENTICATING FOR org.freedesktop.systemd1.manage-unit-files ===
Authentication is required to manage system service or unit files.
Authenticating as: Mks,,, (mks)
Password:
==== AUTHENTICATION COMPLETE ===
==== AUTHENTICATING FOR org.freedesktop.systemd1.reload-daemon ===
Authentication is required to reload the systemd state.
Authenticating as: Mks,,, (mks)
Password:
==== AUTHENTICATION COMPLETE ===
mks@mkspi:~$ sudo timedatectl set-ntp true
[sudo] password for mks:
mks@mkspi:~$ date
Sat 28 Oct 2023 12:36:16 AM CST
CChen616 commented 2 months ago

@greg9504 try using

dpkg-reconfigure tzdata 

to set the timezone and run sudo timedatectl set-ntp true agian

If it shows NTP service: active

mks@mkspi:/root$ sudo timedatectl set-ntp true
mks@mkspi:/root$ timedatectl
               Local time: Sat 2022-12-17 06:25:17 CST
           Universal time: Fri 2022-12-16 22:25:17 UTC
                 RTC time: Thu 2016-01-21 11:14:39
                Time zone: Asia/Shanghai (CST, +0800)
System clock synchronized: no
              NTP service: active
          RTC in local TZ: no

The service is already activated, just wait for a while and the time shall be synced

mks@mkspi:/root$ timedatectl
               Local time: Wed 2024-06-12 09:45:21 CST
           Universal time: Wed 2024-06-12 01:45:21 UTC
                 RTC time: Wed 2024-06-12 01:45:21
                Time zone: Asia/Shanghai (CST, +0800)
System clock synchronized: yes
              NTP service: active
          RTC in local TZ: no
greg9504 commented 2 months ago

Thanks, but I just finished installing 4.4.19 via USB (everything is OK after installation). I had to turn off virus protection for the folder I downloaded it to.