INTRODUCTION

The only problems encountered so far are related to anti-virus solutions and behavior analysis components present in some security solutions. Please read this page carefully before downloading and installing the BMProduction Framework and the Products that use it.

BMProduction guarantees the integrity of its Products by digitally signing the main components and above all the setup package with three digital signatures. In addition it provides the SHA1 hash of the setup file on the download page in order to allow the user to check the integrity of the downloaded products. Again with the aim of simplifying these verification procedures, it makes available, among the components of the Framework, a Tool with a completely free graphic interface for extracting and checking hashes.

1. BLOCKING DOWNLOADS BY THE BROWSER

Some browsers, when downloading software from some sites, block the download by showing a security warning explaining that "you are downloading from a little-known site" or something similar. According to these systems, a software is reliable or it is not, only on the basis of how big the company that produced it and therefore small-medium enterprises or free developers always produce "suspicious" things. It would be different with a block or warning based on a scan of what that software actually does.

Solution

Some browsers, when downloading software from some sites, block the download by showing a security warning explaining that "you are downloading from a little-known site" or something similar. According to these systems, a software is reliable or it is not, only on the basis of how big the company that produced it and therefore small-medium enterprises or free developers always produce "suspicious" things. It would be different with a block or warning based on a scan of what that software actually does.

2. ANALYSIS OF BEHAVIOR BASED ON CYBER-CAPTURE OR SIMILAR TECHNOLOGY

Some security solutions, including some antivirus software such as AVG or AVAST, implement a technology for analyzing suspicious application behavior called Cyber-Capture. Similar solutions may be in use in other software. The operating principle of this system is to start each application inside a sandbox and then analyze what that application has done. If the analysis concludes that the software is not dangerous, the software is closed and re-executed but this time out of the sandbox.

Solution

The BMProduction Products setup program, as it happens for the majority of setup programs, having to make changes to the system verifies the presence of all the necessary components, if they are absent provides to download and install them, remove previous versions, register libraries and perform various other operations suitable to install the Product. When the sandbox technology is active, the user is able to install the BMProduction Products without any obstacle, as they are free of viruses or malicious components, but the user must be aware that the use of these technologies will cause a succession of windows on the screen and above all the use of the double or sometimes of the triple time that the setup normally takes to carry out its operations. These times do not depend and are not attributable to BMProduction.

3. POSITIVE FALSE IN ANTIVIRUS PRODUCTS

Some antivirus solutions detect viruses where they are not. Good software houses generally correct these false positives as they are detected in the updates of the subsequent definitions, thanks to the possibility of reporting a false positive online or to the antivirus software itself which uploads it to the company's servers. Unfortunately there are also software houses that do not correct these false positives, making it difficult for users to use different software.

Solution

At the moment, all BMProduction products based on BMProduction Framework 4.0 seem to work properly. If the antivirus in use should detect one or more components as false positives, the advice is to temporarily disable the protection, install the Product, and insert the Product files among the exceptions of the antivirus. When you have doubts about the validity of a file, it is a good idea to try sending them to completely free online antivirus analysis systems or have them scanned by other antivirus software. The online sending of the BMProduction software must take into account the Software License Terms.

By reporting any false positives to BMProduction, it will be more possible to keep this page updated.

BMProduction would like to thank the many companies that deal with security and that promptly correct the problem of false positives.

Last update: 2019-09-23