How to indentify false positives (lemmy.dbzer0.com)

submitted 1 month ago by m4a@lemmy.dbzer0.com to c/selfhosting@slrpnk.net

4 comments fedilink hide all child comments

So, I tried to install lidarr on my windows machine via the exe on the website, but my antivirus flagged it immediately. I am sure i could just work around this by disabling the antivirus for a bit or by composing it manually, but for all I know maybe someone inserted some malicious code. Is this an issue y'all have noticed? How can I tell if this is actually malicious?

you are viewing a single comment's thread
view the rest of the comments

[-] violetrage@slrpnk.net 2 points 1 month ago

See if the developers publish hashes of their executables (something like sha1/256, md5...). Then you can take the hash of your executable, and if they are the same, you should have gotten the exact same file. This does of course not help if the place you get the hashes from is also compromised.

this post was submitted on 18 Jun 2026

7 points (81.8% liked)

Self-hosting

4544 readers

1 users here now

Hosting your own services. Preferably at home and on low-power or shared hardware.

Please don't share vibe coded projects here.

Also check out:

founded 4 years ago

MODERATORS

poVoq@slrpnk.net

sam_uk@slrpnk.net