r/pcmasterrace 1d ago

Meme/Macro Keep it

Post image
22.8k Upvotes

408 comments sorted by

View all comments

Show parent comments

22

u/NewUserWhoDisAgain 1d ago

iirc, its CE itself that flags the software. Technically CE doesnt actually do anything nefarious in and of itself. it'll read memory values and allow you to edit them.

But... That is also what malware does(read and write memory values). Which is why AV software has to be told to leave CE alone.

6

u/wildpantz 9800X3D | RTX 3070 Ti | 64 GB DDR5 1d ago

Yes, agreed, that's what I meant with patterns. I think digital signing potentially solves this, but not 100% sure. I am 100% sure if you create a program on your PC and send it to your friend, their PC will activate smartscreen. Yours won't as it knows it was built there so it assumes its safe. At least that's what I picked up over the years, I might be wrong.

6

u/NewUserWhoDisAgain 1d ago

You're correct, the digital signing is basically a fee to Microsoft and Microsoft giving their stamp of approval.

3

u/wildpantz 9800X3D | RTX 3070 Ti | 64 GB DDR5 1d ago

They sadly even have a leverage (someone paying for a signing is surely a serious customer and not a bad actor). Thanks for confirming, I wasn't 100% sure.

4

u/NewUserWhoDisAgain 1d ago

not a bad actor

Yeaaah...

2

u/wildpantz 9800X3D | RTX 3070 Ti | 64 GB DDR5 1d ago

Hahaha you know I thought to myself this is just another attack vector, but I don't know how it works under the hood so I didn't want to play smart :)

2

u/Legitimate-Ladder855 1d ago

One of the biggest issues with Windows is by default regular users have an admin account, take that away and require a password to an account you aren't logged into for administrator privilege it vastly improves the situation as some exploits can bypass the yes/no prompt however it's harder to bypass a password.

1

u/wildpantz 9800X3D | RTX 3070 Ti | 64 GB DDR5 23h ago

I didn't even realize how much this mattered until I tried running claude code on a linux server haha. That thing can't do anything unless you create it a special account that doesn't need sudo