ani @anais.dev · Aug 20 This approach may have significant issues with 3rd-party antivirus and endpoint monitoring solutions, because this code is effectively indistinguishable from a malware dropper - "I just simply download an EXE to $TEMP, extract it, and it starts replacing binaries"
0 likes 1 replies
?
Replies
I would instead consider using a trampoline executable similar to what Squirrel.Windows does. In fact, I would consider just using Squirrel! It is a Known Quantity to AV at this point, it handles installation and updates for you, and it can definitely be made to work fairly easily with Rust apps