mltframework / shotcut

cross-platform (Qt), open-source (GPLv3) video editor
https://www.shotcut.org
GNU General Public License v3.0
11.13k stars 1.14k forks source link

Shotcut Setup blocked by smart app control #1607

Open Andrew-939 opened 3 days ago

Andrew-939 commented 3 days ago

Good morning, I would like to report that the setup files of the releases "shotcut-win64-241117.exe" and "shotcut-win64-241029.exe" are blocked by the "smart app control" function of Windows Security on Windows 11 24H2.

The release "shotcut-win64-240913.exe", however, is not blocked and works correctly.

As per Microsoft documentation, it is not possible to disable and re-enable "smart app control" without reformatting Windows.

I attach warning messages and the link that opens by clicking on "more information".

2

1

https://support.microsoft.com/it-it/topic/il-controllo-dell-app-intelligente-ha-bloccato-parte-dell-app-0729fff1-48bf-4b25-aa97-632fe55ccca2

ddennedy commented 3 days ago

According to section How does Smart App Control work? at https://support.microsoft.com/en-us/topic/what-is-smart-app-control-285ea03d-fa88-4d56-882e-6698afdb7003

Smart App Control will check to see if our intelligent cloud-powered security service can make a confident prediction about its safety.

We have not changed anything about our signing process or installer. That means the cloud is being slow to update its trust score, and this might simply take some more time. It could be because we added an executable for Whisper.cpp, and that might cause delay. I will sign all .exes for the next version (currently only shotcut.exe and glaxnimate.exe are signed as well as the installer). Maybe that will work, but unfortunately it seems Microsoft does not provide a good way for a developer to verify their app or installer.

A workaround is to get the application from the Microsoft Store.

Andrew-939 commented 3 days ago

Thanks for the very quick response. I await the next release and will let you know.

If it can be helpful, from the Windows Security notification message it seems that the file whose execution is blocked is "shotcut-win64-241117.tmp"

ddennedy commented 3 days ago

OK, that is weird because that is then coming from the Inno Setup installer that we use in a very basic manner. Our installer is signed BTW. I searched Web for issues with Inno Setup and Smart App Control but found nothing relevant. Maybe this is not something we can do anything about.