Post

ani
@anais.dev

This approach may have significant issues with 3rd-party antivirus and endpoint monitoring solutions, because this code is effectively indistinguishable from a malware dropper - "I just simply download an EXE to $TEMP, extract it, and it starts replacing binaries"

ani
@anais.dev

I would instead consider using a trampoline executable similar to what Squirrel.Windows does. In fact, I would consider just using Squirrel! It is a Known Quantity to AV at this point, it handles installation and updates for you, and it can definitely be made to work fairly easily with Rust apps

0 reposts0 likes

No replies yet.