|
|
Forum Thread: VLC incorrectly detected - again
You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.
This thread was submitted in the following forum:
Problems and Questions Regarding 3rd Party Programs
| xerces8
| VLC incorrectly detected - again
|
|
|
by xerces8 on 17th Dec, 2008 13:50
|
Posts: 13
User Since: 27th Oct, 2008
Secunia System Score: N/A
Location: N/A |
I have VLC 0.9.8a (updated it more times, using the link in PSI : "Download Solution").
PSI still lists is as a threat. I claims it is version "0.9.8".
I use PSI 1.0.0.2.
PSI 1.0.0.1 on another PC does not have this problem.
Both running WinXP Pro SP3. |
|
|
| ShadowMaster
| RE: VLC incorrectly detected - again
|
|
|
by ShadowMaster on 17th Dec, 2008 22:31
|
Posts: 2
User Since: 14th Apr, 2008
Secunia System Score: 99%
Location: Trondheim, NO |
Secunia PSI 1.0.0.0 detects VLC 0.9.8a as 0.9.6 as well.
Annoying that VLC keeps getting "false positives" |
|
|
| xerces8
| RE: VLC incorrectly detected - again
|
|
|
by xerces8 on 18th Dec, 2008 11:48
|
Posts: 13
User Since: 27th Oct, 2008
Secunia System Score: N/A
Location: N/A |
Yeah, how hard can it be to make md5 (or sha1) sums of the files and compare ??? |
|
|
| BigDave_39
| RE: VLC incorrectly detected - again
|
|
|
by BigDave_39 on 18th Dec, 2008 19:05
|
Posts: 175
User Since: 26th Nov, 2008
Secunia System Score: N/A
Location: Washington, DC, US |
on 18th Dec, 2008 11:48, xerces8 wrote:
Yeah, how hard can it be to make md5 (or sha1) sums of the files and compare ???
The problem is with you. No problems here - have you checked the path?
--
Big Dave |
|
|
| daytrader
| RE: VLC incorrectly detected - again
|
|
|
by daytrader on 19th Dec, 2008 14:22
|
Posts: 13
User Since: 19th Dec, 2008
Secunia System Score: N/A
Location: N/A |
on 18th Dec, 2008 19:05, BigDave_39 wrote:
The problem is with you. No problems here - have you checked the path?
The problem is with the app. I am a new user of it. I came here specifically because VLC keeps showing up as 0.8.6c, though I have updated it (3x) to 0.9.8.1 and re-scanned. I am using Advanced mode and use a non-standard installation path. I have checked the path that Secunia is reporting. It is identical. I'm using Secunia 1.0.0.1.
Someone here mentioned there is now a 1.0.0.2? I will go look. |
|
|
| rab
| RE: VLC incorrectly detected - again
|
|
|
by rab on 19th Dec, 2008 14:32, last edited on 19th Dec, 2008 14:32
|
Posts: 8
User Since: 20th Jan, 2008
Secunia System Score: 100%
Location: US |
There are alot of programs that update ,but DO NOT uninstall older versions of the program. You have to either go to add/remove programs and uninstall the older version. Or sometimes you just have to find and remove a single file. And PSI will some stop saying it out of date ,insecure .
Hope this helps,
rab |
|
|
| xerces8
| RE: VLC incorrectly detected - again
|
|
|
by xerces8 on 19th Dec, 2008 15:55
|
Posts: 13
User Since: 27th Oct, 2008
Secunia System Score: N/A
Location: N/A |
VLC _does_ uninstall the old version. |
|
|
| xerces8
| RE: VLC incorrectly detected - again
|
|
|
by xerces8 on 19th Dec, 2008 18:33
|
Posts: 13
User Since: 27th Oct, 2008
Secunia System Score: N/A
Location: N/A |
It is some kind of bug in PSI.
I had two copies of VLC 0.9.8a:
- one installed in Program Files
- one unzipped in My Documents
PSI listed both as version "0.9.8" and insecure.
Then I deleted the copy from the My Documents folder.
After that PSI did not report VLC as a threat any more. |
|
|
| genegold99
| RE: VLC incorrectly detected - again
|
|
|
by genegold99 on 19th Dec, 2008 19:11
|
Posts: 72
User Since: 25th Nov, 2008
Secunia System Score: N/A
Location: N/A |
For me, that and Adobe acrobat.exe were listed as insecure yesterday, with VLC 0.9.8a showing again as 0.8.6h. After downloading the current versions, reinstall and a reboot, the Adobe cleared and VLC did after a rescan. I'm going to post another thread about why ostensibly up to date apps are all of a sudden showing as insecure. |
|
|
| daytrader
| RE: VLC incorrectly detected - again
|
|
|
by daytrader on 19th Dec, 2008 22:55
|
Posts: 13
User Since: 19th Dec, 2008
Secunia System Score: N/A
Location: N/A |
The updated app does uninstall the old version. And I'm now running Secunia 1.0.0.3. The problem persists. VLC is being misreported. I suspect this has to do with non-standard-path installations.
I have similar problems with some other apps. Specifically, WinSCP, which I have updated to the current version (twice). Not only that, but the Secunia link to download the latest of that referred, instead, to a very old version from mid-2006. I'll report more about these other problem apps in a different thread. |
|
|
| daytrader
| RE: VLC incorrectly detected - again
|
|
|
by daytrader on 19th Dec, 2008 23:06
|
Posts: 13
User Since: 19th Dec, 2008
Secunia System Score: N/A
Location: N/A |
OK, I figured out how to fix the problem with VLC. Go into the Program Group and find "Quick Settings / Reset VLC Media Player preferences and cache files" and click on it. Secunia will suddenly discover that it's the correct, patched, new version. |
|
|
| genegold99
| RE: VLC incorrectly detected - again
|
|
|
by genegold99 on 19th Dec, 2008 23:16
|
Posts: 72
User Since: 25th Nov, 2008
Secunia System Score: N/A
Location: N/A |
on 19th Dec, 2008 22:55, daytrader wrote:
The updated app does uninstall the old version. And I'm now running Secunia 1.0.0.3. The problem persists. VLC is being misreported. I suspect this has to do with non-standard-path installations.
I have similar problems with some other apps. Specifically, WinSCP, which I have updated to the current version (twice). Not only that, but the Secunia link to download the latest of that referred, instead, to a very old version from mid-2006. I'll report more about these other problem apps in a different thread.
See my thread (12/19, 19:31): "Why do apparently up-to-date applications turn Insecure in PSI 1.x?" There has been a standing problem with VLC, in that its developers didn't update the version information attached to the files. That may still be the case, but it doesn't explain why PSI 1.x turns the same file from secure to insecure. |
|
|
| genegold99
| RE: VLC incorrectly detected - again
|
|
|
by genegold99 on 19th Dec, 2008 23:26
|
Posts: 72
User Since: 25th Nov, 2008
Secunia System Score: N/A
Location: N/A |
on 19th Dec, 2008 23:06, daytrader wrote:
OK, I figured out how to fix the problem with VLC. Go into the Program Group and find "Quick Settings / Reset VLC Media Player preferences and cache files" and click on it. Secunia will suddenly discover that it's the correct, patched, new version.
Program Group, where is that? I don't see any such menu title (or the others) in current VLC or PSI. Thanks.
|
|
|
| daytrader
| RE: VLC incorrectly detected - again
|
|
|
by daytrader on 19th Dec, 2008 23:31
|
Posts: 13
User Since: 19th Dec, 2008
Secunia System Score: N/A
Location: N/A |
on 19th Dec, 2008 23:26, genegold99 wrote:
Program Group, where is that? I don't see any such menu title (or the others) in current VLC or PSI. Thanks.
"Program Group" is what just about any program you install creates under the Start Menu. Click on the Start Menu, then click on All Programs; then find the Video LAN Program Group. Under there is another subdirectory named "Quick Settings"; and beneath that is the link I described.
Or just go to the VLC directory in a Win32 DOS window on your hard drive and run the command line (from the shortcut):
vlc.exe --reset-config --reset-plugins-cache vlc://quit |
|
|
| genegold99
| RE: VLC incorrectly detected - again
|
|
|
by genegold99 on 19th Dec, 2008 23:44, last edited on 19th Dec, 2008 23:44
|
Posts: 72
User Since: 25th Nov, 2008
Secunia System Score: N/A
Location: N/A |
Thanks, daytrader! I don't recall seeing Start > Programs referred to as "Program Groups" in the Windows versions I've used. More important, the fix begs the question why the problem is arising in PSI in the first place, since it's not just VLC alone that's been going from secure to insecure for no apparent reason (e.g., Adobe Acrobat and maybe others being mentioned). |
|
|
| daytrader
| RE: VLC incorrectly detected - again
|
|
|
by daytrader on 19th Dec, 2008 23:58, last edited on 19th Dec, 2008 23:58
|
Posts: 13
User Since: 19th Dec, 2008
Secunia System Score: N/A
Location: N/A |
on 19th Dec, 2008 23:44, genegold99 wrote:
Thanks, daytrader! I don't recall seeing Start > Programs referred to as "Program Groups" in the Windows versions I've used...
While it's true that I've been using computers for 29 years, and while I believe it's true that the term originated with 16-bit Windows apps prior to Windows 95, it is still a current term. You need a name to call the collections of links grouped by installed program and found beneath the Start Menu. :-) See, e.g., http://www.worldstart.com/tips/computer-terms/term...
I agree that Secunia seems to have various problems correctly detecting some programs. I have some sympathy for Secunia, because I'm aware it's a complex problem and vendors are not always good about standardization. I don't particularly think comments such as BigDave_39's up above of "The problem is with you" are all that helpful, in any case. |
|
|
| genegold99
| RE: VLC incorrectly detected - again
|
|
|
by genegold99 on 20th Dec, 2008 18:56, last edited on 20th Dec, 2008 18:56
|
Posts: 72
User Since: 25th Nov, 2008
Secunia System Score: N/A
Location: N/A |
on 19th Dec, 2008 23:58, daytrader wrote:While it's true that I've been using computers for 29 years, and while I believe it's true that the term originated with 16-bit Windows apps prior to Windows 95, it is still a current term. You need a name to call the collections of links grouped by installed program and found beneath the Start Menu. :-) See, e.g., http://www.worldstart.com/tips/computer-terms/term...
I agree that Secunia seems to have various problems correctly detecting some programs. I have some sympathy for Secunia, because I'm aware it's a complex problem and vendors are not always good about standardization. I don't particularly think comments such as BigDave_39's up above of "The problem is with you" are all that helpful, in any case.
In my 43 years of programming and using computers of most types (as a non-IT professional), I have to say that PSI is a program more prone to annoy and confuse, as well as please, users than any I've come across. Usually, end users either get a notice from an application's developers that an update is available, they read about it somewhere, or they just check themselves or someone else does it for them (e.g., at work). So here we have PSI telling us on our home computers full of all sorts of anti-malware software that something is out of date. That's a helpful notice, yet sometimes when we check it turns out not to be true, or seemingly not true. Moreover, there are some apps that are installed in multiple places on our computers (e.g., JRE) and thus require a lot more manipulation to make secure in the eyes of PSI than a simple update typically requires. This is not a program for the faint of computer. Of course, when you stoke the fire of end users on something so close to home, there are going to be all sorts of reactions. To accept its good, using PSI requires an open mind and developing a lot of patience. I agree that BigDave_39's comment is not helpful, but I assume he'll probably run into some problem down the line with PSI and wise up.
Btw, about "program groups," I was curious because in the several Windows-oriented e-letters that come my way, I can't recall it being used (my days with Win 3.x passed quickly). These days it's common to see instructions given as, say, click on Start > Programs > ... Perhaps that's because "Programs" (alone) is what people see in XP versions of Windows? In paging through the results of a google search on "'program groups' Windows," there is your link, but otherwise it doesn't seem to be widely used anymore by non-specialists.
|
|
|
| daytrader
| RE: VLC incorrectly detected - again
|
|
|
by daytrader on 21st Dec, 2008 12:55
|
Posts: 13
User Since: 19th Dec, 2008
Secunia System Score: N/A
Location: N/A |
on 20th Dec, 2008 18:56, genegold99 wrote:
So here we have PSI telling us on our home computers full of all sorts of anti-malware software that something is out of date. That's a helpful notice, yet sometimes when we check it turns out not to be true, or seemingly not true. Moreover, there are some apps that are installed in multiple places on our computers (e.g., JRE) and thus require a lot more manipulation to make secure in the eyes of PSI than a simple update typically requires. This is not a program for the faint of computer.
I quite agree with this. I myself am having some trouble figuring out how to deal with a few corner-cases, one with JRE 5.x being one such. A program that runs GTK+ library stuff is another. I have spent inordinate time already trying to figure out a way to kludge an update there. I could just give up and declare the app an exception. I don't really think it's dangerous that it's sitting on my computer, especially given the way I use it and (in-) frequency. But I'd update or secure it if I could figure out how. After more than an hour of trying, I'm no wiser there. (Clarifying, that's not the program for which this thread was started. It's just an example of what you're talking about that hits home for me.)
on 20th Dec, 2008 18:56, genegold99 wrote:
Btw, about "program groups," I was curious because in the several Windows-oriented e-letters that come my way, I can't recall it being used (my days with Win 3.x passed quickly). These days it's common to see instructions given as, say, click on Start > Programs > ... Perhaps that's because "Programs" (alone) is what people see in XP versions of Windows? In paging through the results of a google search on "'program groups' Windows," there is your link, but otherwise it doesn't seem to be widely used anymore by non-specialists.
I concede that it's nowadays mostly an insider term. But it continues to have currency. Under the Start menu are actual directories, shortcuts, and "magic" files (with special properties based on registry tweaks or the inherent design of the OS's directory structure or both). The directories that contain links ("shortcuts" in Windows-speak) to the actual programs have to have a name so we can talk about them. I personally always do a custom installation of any new software I put on my computer, and I also customize the location of these Program Groups. I have an alphabetized hierarchy under Start with a half-dozen sub-categories, rather than having a few hundred unorganized, unalphabetized things there. Many of the better-coded programs out there allow the user to state a custom path for the Program Group. When I am installing such a program, I use that option, and I appreciate the thoughtful coding of the vendor in providing it to me.
For grins I just used a binary-search tool to look in about 1500 downloaded program installation files I save on an archive partition. I looked for the term. Here are the results:
Searched 1511 file(s), found 17 occurrences in 3 file(s) |
|
|
| genegold99
| RE: VLC incorrectly detected - again
|
|
|
by genegold99 on 21st Dec, 2008 19:49
|
Posts: 72
User Since: 25th Nov, 2008
Secunia System Score: N/A
Location: N/A |
This is way off topic, but since it's the only way of communicating I'd be interested in knowing more about how to organize the program groups. It might allow me to substitute better background organization for an aging memory that insists on seeing desktop icons. Is there a write-up that you could point me to? thanks, |
|
|
| daytrader
| RE: VLC incorrectly detected - again
|
|
|
by daytrader on 21st Dec, 2008 23:56
|
Posts: 13
User Since: 19th Dec, 2008
Secunia System Score: N/A
Location: N/A |
on 21st Dec, 2008 19:49, genegold99 wrote:
This is way off topic, but since it's the only way of communicating I'd be interested in knowing more about how to organize the program groups. It might allow me to substitute better background organization for an aging memory that insists on seeing desktop icons. Is there a write-up that you could point me to?
Not especially a write-up that I know about. Here is what my Desktop/Start Menu look like, though:
http://cluesforhumans.com/help/WinXP/organized_sta...
|
|
|
| mrbellek
| RE: VLC incorrectly detected - again
|
|
|
by mrbellek on 22nd Dec, 2008 14:02
|
Posts: 4
User Since: 15th Dec, 2008
Secunia System Score: N/A
Location: N/A |
Another user with the VLC problem reporting. Just used the quick settings reset fix but it didn't help. Using PSI 1.0.0.3. I really hope there's going to be an update for this bug.
And I agree that telling people that the fault lies on their end does not help - especially not if multiple users are reporting the exact same problem. |
|
|
| ShadowMaster
| RE: VLC incorrectly detected - again
|
|
|
by ShadowMaster on 22nd Dec, 2008 14:51
|
Posts: 2
User Since: 14th Apr, 2008
Secunia System Score: 99%
Location: Trondheim, NO |
Even if the origin of the problem is with how the app itself reports version numbers, imho checksum checking should be implemented in the case of applications known to misreport version numbers like VLC. |
|
|
| daytrader
| RE: VLC incorrectly detected - again
|
|
|
by daytrader on 22nd Dec, 2008 16:56
|
Posts: 13
User Since: 19th Dec, 2008
Secunia System Score: N/A
Location: N/A |
on 22nd Dec, 2008 14:02, mrbellek wrote:
Another user with the VLC problem reporting. Just used the quick settings reset fix but it didn't help. Using PSI 1.0.0.3. I really hope there's going to be an update for this bug.
Just checking -- did you ask Secunia to re-scan the app afterward?
|
|
|
| mrbellek
| RE: VLC incorrectly detected - again
|
|
|
by mrbellek on 22nd Dec, 2008 17:07
|
Posts: 4
User Since: 15th Dec, 2008
Secunia System Score: N/A
Location: N/A |
*sigh* Yes. Three times. |
|
|
| genegold99
| RE: VLC incorrectly detected - again
|
|
|
by genegold99 on 22nd Dec, 2008 18:52
|
Posts: 72
User Since: 25th Nov, 2008
Secunia System Score: N/A
Location: N/A |
on 22nd Dec, 2008 17:07, mrbellek wrote:
*sigh* Yes. Three times.
Unless there's another older version of the vlc.exe file sitting somewhere on your computer, I hate to say this but it's just a matter of repetition and patience. For me, anywhere from one to four reinstalls plus computer reboots and/or re-scans has done it. Definitely don't do the online scan, as that seems to be behind the times and create nothing but trouble.
|
|
|
| daytrader
| RE: VLC incorrectly detected - again
|
|
|
by daytrader on 9th Jan, 2009 23:56
|
Posts: 13
User Since: 19th Dec, 2008
Secunia System Score: N/A
Location: N/A |
I used the VLC program today and earlier. Secunia did a scheduled scan, and suddenly VLC was back in the compromised list. I had to go do the "Reset VLC media player preferences and cache files" thing again and re-scan. Then it went back to secure.
I'd hate to think Secunia wants me to reset my prefs and cache every time I use the program to keep it from getting re-listed as insecure. |
|
|
| genegold99
| RE: VLC incorrectly detected - again
|
|
|
by genegold99 on 10th Jan, 2009 04:59
|
Posts: 72
User Since: 25th Nov, 2008
Secunia System Score: N/A
Location: N/A |
I've had two times in the past month when VLC and Adobe Acrobat went insecure. After rescanning each, they returned to the good side. |
|
|
| UpTo_daTe
| RE: VLC incorrectly detected - again
|
|
|
by UpTo_daTe on 5th Feb, 2009 08:00
|
Posts: 5
User Since: 7th Dec, 2008
Secunia System Score: 100%
Location: Berlin, DE |
I experience the same issue since several weeks. It's obviously a 'bug' of PSI version 1.0.0.2, nevertheless it's nerving. I receive two entries in the report, though I've installed just a single application. |
|
|
| bromberg
| RE: VLC incorrectly detected - again
|
|
|
by bromberg on 6th Feb, 2009 01:48
|
Posts: 8
User Since: 1st Dec, 2008
Secunia System Score: N/A
Location: N/A |
I find it disappointing that this thread has gone on for so long and Secunia appears to have no interest in setting the record straight, especially since so many of us are complaining about the apparent false positive regarding VLC 98a. I certainly appreciate Secunia's service but wish I could get a clean report out of them, especially since it was HP Support who instructed me to install VLC due to an issue I had with Windows Media Player being unable to handle 'avi' files in 64-bit Vista...sigh! |
|
|
| UpTo_daTe
| RE: VLC incorrectly detected - again
|
|
|
by UpTo_daTe on 6th Feb, 2009 09:32
|
Posts: 5
User Since: 7th Dec, 2008
Secunia System Score: 100%
Location: Berlin, DE |
Yep! To me it seemes, that they have more than this problem to solve. I hate to have reported an application for insecure, that is up to date already, and I also hate double entries. >:- | |
|
|
| matti1996
| RE: VLC incorrectly detected - again
|
|
|
by matti1996 on 9th Feb, 2009 19:55
|
Posts: 2
User Since: 18th Dec, 2008
Secunia System Score: N/A
Location: N/A |
My Secunia detects it as 0.86 but i have 0.96a
I use Win XP Home Edition Service Pack 2 and Secunia PSI 1.0.0.2 |
|
|
| matti1996
| RE: VLC incorrectly detected - again
|
|
|
by matti1996 on 9th Feb, 2009 19:55
|
Posts: 2
User Since: 18th Dec, 2008
Secunia System Score: N/A
Location: N/A |
My Secunia detects it as 0.86 but i have 0.96a
I use Win XP Home Edition Service Pack 2 and Secunia PSI 1.0.0.2 |
|
|
| UpTo_daTe
| RE: VLC incorrectly detected - again
|
|
|
by UpTo_daTe on 10th Feb, 2009 11:08, last edited on 10th Feb, 2009 11:08
|
Posts: 5
User Since: 7th Dec, 2008
Secunia System Score: 100%
Location: Berlin, DE |
I use Windows Vista Home Premium SP1 with all patches. I have installed version vlc-0.9.8a-win32, and it is detected as 0.9.6! I'm using Secunia PSI v1.0.0.3.
Very strange and annoying. >:- / |
|
|
| Fortitude75
| RE: VLC incorrectly detected - again
|
|
|
by Fortitude75 on 7th Mar, 2009 09:26
|
Posts: 2
User Since: 7th Mar, 2009
Secunia System Score: N/A
Location: N/A |
I am using Windows Vista Home Premium SP1, and Secunia PSI v1.0.0.3.
I have installed VLC version 0.9.8a, and it is detected as version 0.8.6b
|
|
|
| genegold99
| RE: VLC incorrectly detected - again
|
|
|
by genegold99 on 3rd Apr, 2009 21:59
|
Posts: 72
User Since: 25th Nov, 2008
Secunia System Score: N/A
Location: N/A |
VLC has just updated to 0.9.9, but is getting the same false positive with PSI after automatic or full scans, showing an 0.8.x version. It then corrects itself on rescan of the application, and the correct version shows under the Patched software. I made screenshots of before, during and after and sent them to PSI support. Maybe if some others do the same, the problem will be detected, explained and corrected. The address can be found near the bottom of http://secunia.com/vulnerability_scanning/personal... |
|
|
| bromberg
| RE: VLC incorrectly detected - again
|
|
|
by bromberg on 3rd Apr, 2009 23:26
|
Posts: 8
User Since: 1st Dec, 2008
Secunia System Score: N/A
Location: N/A |
I just updated to PSI version 1.0.0.4 and am still getting the annoying false positive error message. For such a great service, what will it take for Secunia to recognize this as an issue they need to address? |
|
|
| genegold99
| RE: VLC incorrectly detected - again
|
|
|
by genegold99 on 3rd Apr, 2009 23:34
|
Posts: 72
User Since: 25th Nov, 2008
Secunia System Score: N/A
Location: N/A |
on 3rd Apr, 2009 23:26, bromberg wrote:
I just updated to PSI version 1.0.0.4 and am still getting the annoying false positive error message. For such a great service, what will it take for Secunia to recognize this as an issue they need to address?
If it's sufficiently important enough to you, why not try following my suggestion about direct contact? |
|
|
| bromberg
| RE: VLC incorrectly detected - again
|
|
|
by bromberg on 3rd Apr, 2009 23:45
|
Posts: 8
User Since: 1st Dec, 2008
Secunia System Score: N/A
Location: N/A |
Genegold99:
I emailed Secunia months ago and as I recall, they replied since I was not a paying customer they would not investigate. I might be wrong, but I know I did bring the issue to their attention.
BTW, Gene, how come you're not on version 1.0.0.4? In your case, PSI is correctly reporting that you are not running the latest version! |
|
|
| genegold99
| RE: VLC incorrectly detected - again
|
|
|
by genegold99 on 3rd Apr, 2009 23:55
|
Posts: 72
User Since: 25th Nov, 2008
Secunia System Score: N/A
Location: N/A |
on 3rd Apr, 2009 23:45, bromberg wrote:
Genegold99:
I emailed Secunia months ago and as I recall, they replied since I was not a paying customer they would not investigate. I might be wrong, but I know I did bring the issue to their attention.
BTW, Gene, how come you're not on version 1.0.0.4? In your case, PSI is correctly reporting that you are not running the latest version!
PSI has been free to home users since the early betas and RCs, thus unless you are a corporate user I suspect your recollection is mistaken.
The second paragraph of your reply is an ad homeinim attack. Where's that come from? How do you know which version I'm using? And if the problem with VLC started with 1.0.0.3 in late November, what difference does it make? Bizarre. |
|
|
| bromberg
| RE: VLC incorrectly detected - again
|
|
|
by bromberg on 4th Apr, 2009 00:09
|
Posts: 8
User Since: 1st Dec, 2008
Secunia System Score: N/A
Location: N/A |
Gene, perhaps I misunderstood your post, but I interpreted it as you running version 0.9.9 which would explain why PSI said you were running an old version (I never knew they issued a 0.9.9 version!?!).
If I find Secunia's reply to me (from a few months ago) I'll post it to you. |
|
|
| genegold99
| RE: VLC incorrectly detected - again
|
|
|
by genegold99 on 4th Apr, 2009 02:13, last edited on 4th Apr, 2009 02:13
|
Posts: 72
User Since: 25th Nov, 2008
Secunia System Score: N/A
Location: N/A |
on 4th Apr, 2009 00:09, bromberg wrote:
Gene, perhaps I misunderstood your post, but I interpreted it as you running version 0.9.9 which would explain why PSI said you were running an old version (I never knew they issued a 0.9.9 version!?!).
If I find Secunia's reply to me (from a few months ago) I'll post it to you.
The 0.9.9 is the new VLC version. Just before things started in late November, I received an email from PSI's M. Hansen that problems people were having with PSI and VLC were VLC's doing. It had to do with VLC's programmers not updating the version code inside the program. That was apparently true. But when PSI started going back and forth between secure and insecure with VLC (and acrobat.exe) as soon as I installed 1.0.0.3 (from 1.0.0.1), I wrote him (or her) back. However, I'm afraid it got lost in the shuffle or was taken as more of the same rather than a new problem. So I started posting on this forum, as did others. Time passed, nothing changed. Now, with the similar acrobat.exe glitch solved, I tried emailing Secunia again. The purpose of my post earlier today was to inform others about the new VLC version, that PSI is still seeing it the same, and to encourage others to document their experience and send it directly to Secunia (vs. just posting here). At this point, whining about what Secunia is not doing is getting us nowhere, so we might as well try something different. |
|
|
| Fortitude
| RE: VLC incorrectly detected - again
|
|
|
by Fortitude on 5th Apr, 2009 07:13
|
Posts: 1
User Since: 7th Mar, 2009
Secunia System Score: 94%
Location: Versailles, FR |
on 3rd Apr, 2009 23:26, bromberg wrote:
I just updated to PSI version 1.0.0.4 and am still getting the annoying false positive error message...
I have just updated to V1.0.0.4 and in my case, it seems that the problem is solved : VLC 0.9.8a is not detected anymore as Insecure. |
|
|
| genegold99
| RE: VLC incorrectly detected - again
|
|
|
by genegold99 on 5th Apr, 2009 07:23
|
Posts: 72
User Since: 25th Nov, 2008
Secunia System Score: N/A
Location: N/A |
on 5th Apr, 2009 07:13, Fortitude wrote:
I have just updated to V1.0.0.4 and in my case, it seems that the problem is solved : VLC 0.9.8a is not detected anymore as Insecure.
Did you run a full scan? Here it takes some event, a scan apparently provoked by a new PSI rules set or a manual full scan, to turn it insecure. Then I rescan the insecure application and, "Congratulations,..." |
|
|
| Fortitude75
| RE: VLC incorrectly detected - again
|
|
|
by Fortitude75 on 5th Apr, 2009 09:43
|
Posts: 2
User Since: 7th Mar, 2009
Secunia System Score: N/A
Location: N/A |
on 5th Apr, 2009 07:23, genegold99 wrote:
Did you run a full scan?...
You are right :
- If i do a full scan, the problem shows-up again (Detected version VLC = 0.8.6b)
- If i then do a re-scan only for VLC : "Congratulation, you have removed a threat..."
So the problem is still there ! |
|
|
| genegold99
| RE: VLC incorrectly detected - again
|
|
|
by genegold99 on 5th Apr, 2009 17:29
|
Posts: 72
User Since: 25th Nov, 2008
Secunia System Score: N/A
Location: N/A |
on 5th Apr, 2009 09:43, Fortitude75 wrote:
You are right :
- If i do a full scan, the problem shows-up again (Detected version VLC = 0.8.6b)
- If i then do a re-scan only for VLC : "Congratulation, you have removed a threat..."
So the problem is still there !
Good, it's always nice to hear that one's not alone with computer problems. If you have the time and inclination, please write Secunia support (see my April 3 post) about this. Maybe if enough users bring it to their attention, they'll address the matter.
|
|
|
| bromberg
| RE: VLC incorrectly detected - again
|
|
|
by bromberg on 5th Apr, 2009 22:12
|
Posts: 8
User Since: 1st Dec, 2008
Secunia System Score: N/A
Location: N/A |
Gene,
Like I said, I once tried to contact Secunia directly regarding the VLC false positive issue and they blew me off, telling me that the forum was the appropriate spot to address my concerns. It's a useful tool and I'll just have to put up with their error message. If they read the forums then they are aware and choose to postpone a fix until it's convenient for them. I encourage you and others to contact them directly but don't expect anymore encouragement than I received from them.
BTW, I'm confused what the current version of PSI is. Mine says 1.0.0.4 but based on your reply that's incorrect? What's up with that?
|
|
|
|
