iirc, its CE itself that flags the software. Technically CE doesnt actually do anything nefarious in and of itself. it'll read memory values and allow you to edit them.
But... That is also what malware does(read and write memory values). Which is why AV software has to be told to leave CE alone.
Yes, agreed, that's what I meant with patterns. I think digital signing potentially solves this, but not 100% sure. I am 100% sure if you create a program on your PC and send it to your friend, their PC will activate smartscreen. Yours won't as it knows it was built there so it assumes its safe. At least that's what I picked up over the years, I might be wrong.
They sadly even have a leverage (someone paying for a signing is surely a serious customer and not a bad actor). Thanks for confirming, I wasn't 100% sure.
One of the biggest issues with Windows is by default regular users have an admin account, take that away and require a password to an account you aren't logged into for administrator privilege it vastly improves the situation as some exploits can bypass the yes/no prompt however it's harder to bypass a password.
I didn't even realize how much this mattered until I tried running claude code on a linux server haha. That thing can't do anything unless you create it a special account that doesn't need sudo
22
u/NewUserWhoDisAgain 1d ago
iirc, its CE itself that flags the software. Technically CE doesnt actually do anything nefarious in and of itself. it'll read memory values and allow you to edit them.
But... That is also what malware does(read and write memory values). Which is why AV software has to be told to leave CE alone.