Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Windows Defender may give a warning about untrusted application and disallow further execution of Voice-Pro. If SmartScreen security level is set to "Warn", just click "More info" and then click "Run anyway". If SmartScreen is set to level "Block" there will be no button to run the installation. In this case, open the properties of the start.bat file, and check "Unblock", apply the change and run the start.bat again.

https://github.com/abus-aikorea/voice-pro?tab=readme-ov-file...

hard pass and anyone who reads this and continues is bonkers



Doesn't that basically apply to all binary executables? Anything new and unrecognised by the scanner.


There's also the fact that there's a load of precompiled binary files in the app directory https://github.com/abus-aikorea/voice-pro/tree/main/app - sure, they might be the binaries from compiling the source code you see in the repo, or they might be something else. Roll the dice.


Running a Python application using a Windows batch file is not a special task at all. Oobabooga and AUTOMATIC1111 work in the same way. They also have the same issues regarding Windows Defender.

https://github.com/oobabooga/text-generation-webui https://github.com/AUTOMATIC1111/stable-diffusion-webui


They are complaining about the binary files, not the batch files.


This application is executed in a virtual environment (venv) created using Miniconda, independent of the Windows OS. It does not damage the Windows OS.

If you have concerns or doubts about telemetry or spyware, there are countless software options available for detection. Give it a try.


Python venvs are not intended to provide isolation from the host system and therefore do not provide any isolation from the host system.

So yes, the app can certainly harm the OS, and the venv would not provide any protection against this.


I don't have concerns, because I won't be running this code


I'm legitimately wondering what you recommend from among those options.


This is absolutely not true. In fact, considering the deception of this post, if the person making this post is associated with the project then the project should be considered malware.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: