wxMaxima-developers / wxmaxima

A gui for the computer algebra system Maxima built with wxWidgets
https://wxMaxima-developers.github.io/wxmaxima/
Other
478 stars 99 forks source link

Trend Mirco Security does not like Wxmaxima.exe encryption. #1172

Closed richardgobeli closed 5 years ago

richardgobeli commented 5 years ago

My company started using Trend Micro Security. It does not seem to like WxMaxima, because it thinks it has some unauthorized encryption. Does it use encryption? I put an exception on the maxima-current and the bin folder and also on the file wxmaxima.exe and it still quarantines the program when I run it. image

gunterkoenigsmann commented 5 years ago

wxMaxima doesn't use any encryption - even if I would welcome having a possibility to use https in order to check for updates or to encrypt the communication with maxima - just because everything is encrypted nowadays. Would you mind submitting a false-positive issue to TrendMicro? I believe such a thing being descried in https://success.trendmicro.com/solution/1119869-reporting-a-false-positive-issue-in-deep-security

gunterkoenigsmann commented 5 years ago

What wxMaxima does do is to scan the maxima directory for loadable share and demo files. Perhaps trendmicro mistakes that for preparing to encrypt the files later - and wxMaxima contains the bitmaps for the toolbar and the startup commands that teach maxima to talk in XML. It uncompresses all of these pieces of information when they are needed. Perhaps TrendMicro believes the standard uncompressor to be used in a strange way. But storing them uncompressed in memory somehow triggers strange bugs in some compilers that even in 2019 aren't prepared to deal with chunks of user data that are tens of kilobytes big. Which caused bugs that were hard to hunt down...

richardgobeli commented 5 years ago

Today Trend Micro has made a change that it now does not quarantine the WxMaxima.exe file. So it is now OK. The exception I installed only stopped the scanning of the program file. I think the change today also stopped Trend Micro from scanning the running program.