Windows executable contains Trojan:Win32/Ymacco.AA22? about authy HOT 3 CLOSED

It's a false positive.

The binary was built and uploaded by Travis CI from the source code in this repository (https://travis-ci.org/github/alexzorin/authy/builds/737211656).

I'm not going to put effort into working around crappy antivirus heuristics, nor buy a code-signing certificate, for an operating system I don't even use.

The Windows binaries are published as a convenience for whoever wants it, if you don't trust it, then run the program from source using the instructions in the README.

If you feel the need to rotate your TOTP keys, I understand, but I'm 100% sure there's nothing wrong with the binary.

from authy.

I appreciate the binaries being published for windows, for what it's worth! Fantastic tool.

But just as a more jerks being jerks, chrome is flagging your bins as "dangerous" too. I swear the absolute raket that is code signing for stuff like this drives me mad.

Either way, just wanted to say thanks for the awesome software!

from authy.

I appreciate the binaries being published for windows, for what it's worth! Fantastic tool.

But just as a more jerks being jerks, chrome is flagging your bins as "dangerous" too. I swear the absolute raket that is code signing for stuff like this drives me mad.

Either way, just wanted to say thanks for the awesome software!

Chrome marks all downloaded binary files as 'potentially dangerous'. Nothing to worry about!

from authy.