Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Does BleepingComputer DOT com put it's name on software?


  • Please log in to reply
17 replies to this topic

#1 ntkbo

ntkbo

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:25 PM

Posted 17 September 2013 - 08:55 PM

Hi,

 

I downloaded HitmanPro sometime last month I think from it's website.  I recently restored my computer and had to re-download a bunch of programs.  This time I downloaded HitmanPro from this website and noticed something odd.  My copy of HitmanPro now had the word "Bleeping" on it.  Is this normal for all downloads of software from this site?  Does this site brand all the software?  I took a screen shot and uploaded it to imgur so I could share exactly what I meant.

 

Thanks

 

5PqeafA.png

 



BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,271 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:25 PM

Posted 18 September 2013 - 08:14 AM

I just downloaded Hitman Pro from their official web site and it shows the word Bleeping just like in your screenshot...I have not idea why it is there but its not likely related to Bleepingcomputer.com.

Bleepingcomputer does not brand hosted software with its name. As a matter of fact, if you click on the image displayed on the BC download page it will show version 3.73. Build 193 without the words Bleeping.
 
hitmanpro-start.jpg
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 ntkbo

ntkbo
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:25 PM

Posted 18 September 2013 - 01:57 PM

Thank you



#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,271 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:25 PM

Posted 18 September 2013 - 02:00 PM

You're welcome.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:25 AM

Posted 21 September 2013 - 06:48 AM

I downloaded Hitmanpro from Bleepingcomputer and checked the digital signature.

It is signed by SurfRight and the signature is valid, so you can be sure that it has not been changed by Bleepingcomputer.


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,271 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:25 PM

Posted 21 September 2013 - 06:53 AM

Maybe the Bleeping notation is SurfRight's way of thanking BC for hosting it for download. :wink:


.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 Romeo29

Romeo29

    Learning To Bleep


  • BC Advisor
  • 3,194 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:127.0.0.1
  • Local time:05:25 PM

Posted 21 September 2013 - 09:46 AM

I downloaded and it does not show Bleeping. May be, you guys are infected with Bleeping bug :)



#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,271 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:25 PM

Posted 21 September 2013 - 03:09 PM

:hysterical:


.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#9 ntkbo

ntkbo
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:25 PM

Posted 21 September 2013 - 05:42 PM

I downloaded Hitmanpro from Bleepingcomputer and checked the digital signature.

It is signed by SurfRight and the signature is valid, so you can be sure that it has not been changed by Bleepingcomputer.

 

How do I check the digital signature?  I right clicked on the program and choose Properties but didn't notice anything that talked about digital signatures.

 

Thank you



#10 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:25 AM

Posted 21 September 2013 - 05:52 PM

 

I downloaded Hitmanpro from Bleepingcomputer and checked the digital signature.

It is signed by SurfRight and the signature is valid, so you can be sure that it has not been changed by Bleepingcomputer.

 

How do I check the digital signature?  I right clicked on the program and choose Properties but didn't notice anything that talked about digital signatures.

 

Thank you

 

 

In the properties dialog you opened, there should be a Digital Signature tab. Select it.


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#11 ntkbo

ntkbo
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:25 PM

Posted 21 September 2013 - 06:18 PM

I was looking in the properties dialog box for the program's shortcut.  I had to actually go to the folder where the .exe program was located and right click on it and then it showed the tab you spoke of which was signed by SurfRight.  Thank you  :)



#12 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,271 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:25 PM

Posted 21 September 2013 - 06:45 PM

To display the signature details, double-click the Name of Signer line in the Signature list, or click the name to highlight it and click the "Details" button.

If the digital signature is valid, there will be a notation "This digital signature is Ok."
If the file has been tampered with (altered) since it was signed, there will be a notation "This digital signature is not valid."

For those reading this topic and unsure what we are talking about, an example of how to do this is shown here.
 

 

 


.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#13 ntkbo

ntkbo
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:25 PM

Posted 21 September 2013 - 07:11 PM

To display the signature details, double-click the Name of Signer line in the Signature list, or click the name to highlight it and click the "Details" button.

If the digital signature is valid, there will be a notation "This digital signature is Ok."
If the file has been tampered with (altered) since it was signed, there will be a notation "This digital signature is not valid."

For those reading this topic and unsure what we are talking about, an example of how to do this is shown here.
 

 

 

Thank you!  It's almost like you were reading my mind! :P  I had went and did a google search to find out how to see if a digital signature was legit but the talk of "sha"  and hashes and comparing the download site's string to the certificate string was a bit much for me.

 

So I checked and the digital signature was fine.  Then I clicked on view certificate and then clicked the details tab.  After scrolling down I noticed an entry called "Key Usage ...  Digital Signature (80).  It was beside a symbol that looks like an exclamation mark inside of a yellow triangle.  Normally such a symbol is something to be concerned about but I assume in this case it is fine.



#14 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,271 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:25 PM

Posted 21 September 2013 - 07:26 PM

MD5 is commonly used in a wide variety of security applications to check the integrity of files. Using the MD5 Hash, you can check to ensure that the file is digitally identical to the original file from the source by comparing the hash value.

To investigate an MD5 hash, you can use VirusTotal. Read Searching With VirusTotal by my colleague Didier Stevens.

Other Options:
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#15 ntkbo

ntkbo
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:25 PM

Posted 21 September 2013 - 07:52 PM

Thank you for that information.  I actually have the Virus Total webpage bookmarked too in order to check my downloads.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users