[Dx4win] Check For Updates Won't Run

[David Kozinn, K2DBK]

Realistically, for this use case, the risk is pretty minimal. You're 
fetching data files for a programs that contain no information that could be 
considered sensitive. In theory, it makes it easier for someone to spoof the 
source website, so someone potentially could cause your session to be 
redirected to a different website and you'd download a set of files that 
aren't official, but that's about it. Unless there's some specific flaw in 
the program that could somehow be leveraged to do something  other than what 
it's supposed to do (highly unlikely), the really isn't a risk. (Bear in 
mind that if you want to be 100% secure, you need to disconnect your 
computer from the Internet, then from the power source, then throw it into 
one of those industrial shredders.)

A bigger risk would be if the main website didn't use HTTPS (it does). 

-----Original Message-----
From: dx4win-bounces at mailman.qth.net <dx4win-bounces at mailman.qth.net> On 
Behalf Of John Shaw
Sent: Sunday, April 01, 2018 8:29 PM
To: dx4win at mailman.qth.net
Subject: Re: [Dx4win] Check For Updates Won't Run

So how does that affect security for all of this.  Have we now all been put 
at more risk to satisfy those who want to run obsolete systems?

-----Original Message-----
From: dx4win-bounces at mailman.qth.net [mailto:dx4win-bounces at mailman.qth.net] 
On Behalf Of Paul Van Der Eijk
Sent: Monday, 2 April 2018 12:04 p.m.
To: Jim Reisert AD1C <jjreisert at alum.mit.edu>
Cc: DX4WIN Reflector <DX4WIN at mailman.qth.net>
Subject: Re: [Dx4win] Check For Updates Won't Run

XP users should try the update again ; Scott, KA9FOX, changed the website 
such that the files directory no longer requires an https connection. —Paul, 
KK4HD

Sent from my iPhone

> On Mar 31, 2018, at 1:16 PM, Jim Reisert AD1C <jjreisert at alum.mit.edu> 
> wrote:
>
>> On Sat, Mar 31, 2018 at 11:10 AM, David Kozinn K2DBK wrote:
>>
>> The only short-term workaround that I can think of would be to host
>> the actual files on a different website without https and work up a
>> manual process to download and install. (No Jim, I am not suggesting
>> son-of-dxupdate-for-XP-only).
>
> Actually, the country files and award databases are uploaded to my
> website.  They would have to be installed manually.
>
> The latest country file is always here:
>
>    http://www.country-files.com/dx4win/download9/dx4win9_cty.zip
>
> I have not done anything like this for the custom awards and I've
> blocked the directory listing.
>
> If you use these files you are ON YOUR OWN.  I do NOT want to support
> this method of updating DX4WIN 9.  I'd rather you upgrade your
> operating system.  Seriously.  I'm not joking.
>
> --
> Jim Reisert AD1C, <jjreisert at alum.mit.edu>, http://www.ad1c.us
> ______________________________________________________________
> DX4WIN mailing list
> Home: http://mailman.qth.net/mailman/listinfo/dx4win
> Help: http://mailman.qth.net/mmfaq.htm
> Post: mailto:DX4WIN at mailman.qth.net
> Message delivered to pvandereijk at gmail.com
>
> This list hosted by: http://www.qsl.net Please help support this email
> list: http://www.qsl.net/donate.html
______________________________________________________________
DX4WIN mailing list
Home: http://mailman.qth.net/mailman/listinfo/dx4win
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:DX4WIN at mailman.qth.net
Message delivered to zl1byz at gmail.com

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html

______________________________________________________________
DX4WIN mailing list
Home: http://mailman.qth.net/mailman/listinfo/dx4win
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:DX4WIN at mailman.qth.net
Message delivered to k2dbk at arrl.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html