hellzerg/hashing

Virustotal check issue

vatterspun opened this issue · 6 comments

vatterspun commented

Setup: Win7x86

Steps:

  1. Change hash to CRC32
  2. Right click on an item and submit to virustotal

Defect: Error message: "VirusTotal recognizes files only by their MD5, SHA1 or SHA256 hash!"

Expected behavior:

  • Error message above but also prompt the user "Do you wish to switch to SHA256 for this operation?" Once the user says yes, a browser window will be launched with the VirusTotal URL and the SHA256 value will appear in the Hashing program window.
  • Just run SHA256 hash and open in the browser Window.

--

Also, for security reasons I'd also suggest not using the MD5/SHA1 capability and exclusively submit SHA256 values even if it slows down the program. Both MD5 and SHA1 hashes are considered insecure.

hellzerg commented

Version 2.1 will include this functionality. Additionally, only SHA256 hashes will be passed through to VirusTotal for security reasons, as stated above!

  • 👍1
smaragdus commented

Anyone should be aware that VirusTotal is a major privacy threat.

vatterspun commented

Anyone should be aware that VirusTotal is a major privacy threat.

It is owned by Google so I have no doubt any data they can grab, they will. Were you talking about this? https://en.wikipedia.org/wiki/VirusTotal#Privacy

smaragdus commented

@vatterspun
If you have time and patience for legal junk you may read Privacy Policy and Terms of Service . I stopped using this service.

hellzerg commented

@smaragdus
What's your opinion on NoDistribute? Better alternative or not?

smaragdus commented

@hellzerg
I have never used NoDistribute so I don't have opinion. However it doesn't seem to be fully free (Plans). In the past I used Jotti. Usually false positives are galore.