Thank you very much, @optimusprime93. Perhaps they’ll fix their software from catching it now.
Reopening this discussion:
Has anyone with Linux or MacOS reported a virus message?
AFAICT it’s only been reported on Seamly for Windows.
So this supports the theory that the virus is reported because we lack Windows code signing. There’s never been a virus found in Seamly builds, but viruses have been reported sporadically by Windows security programs.
Reasons for False Positives:
- Reputation System: Windows Defender maintains a reputation database for publishers and software. If a publisher or application is new or hasn’t built up a positive reputation, Defender might flag it, even if it’s legitimate.
- Certificate Issues: While code signing is designed to verify the publisher’s identity, issues with the certificate itself (like being expired, untrusted, or not properly chained) can trigger warnings.
Hopefully we’ll get enough donations for the EV code signing certificate and monthly fees to host it in the cloud so our GH build pipeline can access it.
The bigger issue is not that Defender flags the Seamly2D.exe - it quarantines it! It just disappears. Which can be quite disconcerting to users that have no clue what’s going on. Strangely I don’t think it flags SeamlyMe.