Thread: False positive?
View Single Post
Old 09-18-2024, 10:58 AM   #8
DiapDealer
Grand Sorcerer
DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.
 
DiapDealer's Avatar
 
Posts: 28,607
Karma: 204624552
Join Date: Jan 2010
Device: Nexus 7, Kindle Fire HD
Quote:
Originally Posted by Capricorn View Post
As to winget for installing: if you prefer a graphical interface for this, you could use UniGetUI - see https://www.marticliment.com/unigetui/

Works very nicely.
I use that myself. It takes a bit up front to determine what you might want to ignore, or what you might need to freeze versions on, but I agree: it does quite well.

It also has the added bonus (or curse, depending on how you look at things!) of being able to be the gui manager for the Chocolatey and Pip (python) repositories, too. They can be disabled pretty easily if you don't want them.

I'm going to try and put together a down and dirty manuscript of how to Install/Update/Remove Sigil and PageEdit (as well as a guide for general querying of local installs and remote availability). Probably from the command line to start.

----------------------------------------------------

Winget is going to be my official recommendation for safely and securely installing Sigil and PageEdit from now on. Because ...

Getting a code signing cert for my Windows installers is just not in the cards, I'm afraid. The expense is the least of the difficulties (though that's bad enough). Not many companies even sell certs to individuals, and even if they do, they don't sell the EV level to individuals. Which means that users can still get scary warnings about unsafe downloads (until enough people download it). So what's the point? I'm not comfortable paying into a protection racket just to remove the "Unknown Publisher" warning. And that's all I'd be guaranteed with a personal code signing cert. Creating a legal organization entity for Sigil-Ebook in order to get an EV level signing cert would be even more hoops to jump through. That's not in the cards for what Kevin and I do as a hobby.

Winget removes the Unknown Publisher warning for free, because they (and "they" is Microsoft by the way) do their own scanning for malware, and do checksums to make sure the downloads have not been tampered with since they were submitted. So no scary warnings when you download/install with winget. Sigil updates are typically available on winget within days of a new release.

Last edited by DiapDealer; 09-18-2024 at 11:05 AM.
DiapDealer is offline   Reply With Quote