Freedome WinPC update 1.0.582.0 fails to install

Aspirant

Freedome WinPC update 1.0.582.0 fails to install

Hi! Freedome WinPC showed a popup to download and install a new update ver 1.0.582.0 but after awhile a new popup appeared and it reads "Update signature check failed". I tried to update it a couple of times but this happens every time. Then I downloaded the new beta from the link in the Freedome newsletter and it went alright.

 

-Jani

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
F-Secure

Re: Freedome WinPC update 1.0.582.0 fails to install

Hi,

 

There was an issue with the signature of our update package before the Christmas - we e-mailed our beta users about it. Manual installation solved this problem.

 

Sorry about the trouble - we'll try to avoid things like this in the future. But in a way this was also a good trial in this beta project: This verified that our signature check works as it should and manual installation over the existing installation works as well Smiley Wink

 

Tapio

--
Tapio Keihänen
F-Secure Freedome Service Manager
12 REPLIES 12
NKT
Aspirant

Re: Freedome WinPC update 1.0.582.0 fails to install

Basically, to ensure the integrity of the downloaded software update, the computers do checksumming, hashing and other checks. If the results don't tally with what they expect, then they will fail the install on purpose.

 

Imagine if someone saw you using a clever VPN that stopped them spying on your traffic. Wouldn't it be a clever trick to wait until there was an update for it, then insert their tampered file in your datastream, to remove your VPN protection? Well, that's what the checks are there for.

 

Of course, it's more likely an error, but since it's working now, all is likely well. It only takes a difference of a single bit to trigger this, after all.

Aspirant

Re: Freedome WinPC update 1.0.582.0 fails to install

Yes, it is really good that there are data integrity checks in the Freedome update process but I suppose there was some kind of a failure in that update file because this problem occurred in two different PCs. And yes I got it updated after all and Freedome is working ok now but I just reported the problem here if the Freedome team would be interested about it:)

Highlighted
F-Secure

Re: Freedome WinPC update 1.0.582.0 fails to install

Hi,

 

There was an issue with the signature of our update package before the Christmas - we e-mailed our beta users about it. Manual installation solved this problem.

 

Sorry about the trouble - we'll try to avoid things like this in the future. But in a way this was also a good trial in this beta project: This verified that our signature check works as it should and manual installation over the existing installation works as well Smiley Wink

 

Tapio

--
Tapio Keihänen
F-Secure Freedome Service Manager
Aspirant

Re: Freedome WinPC update 1.0.582.0 fails to install

Hi Tapio,

 

Yes, I had a little suspicion that you might have put that failure there on purpose Smiley Wink Thanks for info, great to be of help! Keep up the good work and Happy New Year!

 

-Jani

Aspirant

Re: Freedome WinPC update 1.0.582.0 fails to install

I got today, 23th march 2015,  as for quite some time the popup:

New update available

 

We have an update version of Freedome for you to install (1.0.850.0) Do you want to download and install it automatically now.

 

It does not install or download that exe, but instead complains about invalid certificate. I get shown the manual installation URL next:

https://freedome-beta-updates.fd.f-secure.com/Production/FreedomeUpdate.exe

 

That link will give me a page with this message on Chrome:

 

Your connection is not private

 

Attackers might be trying to steal your information from freedome-beta-updates.fd.f-secure.com etc.

 

What is going on?

 

 

 

F-Secure Product Expert
F-Secure Product Expert

Re: Freedome WinPC update 1.0.582.0 fails to install

Hello Axel99,

 

Thank you for the report. We will be looking at the site certificate.

 

The actual .exe file should be valid and properly signed.

You can confirm it by right-clicking the file and verify that it is signed by us.

 



Best Regards

-Ben

_________________________________

Has somebody helped you? Say thanks by giving likes. Has your issue been solved? Mark the post using "Accept As Solution" button to let others know.
Aspirant

Re: Freedome WinPC update 1.0.582.0 fails to install

Just received an update beta notice this early morning. Then when selecting the update link this error/warning message.

https://freedome-beta-updates.fd.f-

secure.com/Production/FreedomeUpdate.exe

Your connection is not private

Attackers might be trying to steal your information from freedome-beta-updates.fd.f-secure.com (for example, passwords, messages, or credit cards).

NET::ERR_CERT_AUTHORITY_INVALID
Back to safetyHide advanced

This server could not prove that it is freedome-beta-
updates.fd.f-secure.com; its security certificate is not
trusted by your computer's operating system. This may be caused by a misconfiguration or an attacker intercepting your connection.

Proceed to freedome-beta-updates.fd.f-secure.com (unsafe)
Aspirant

Re: Freedome WinPC update 1.0.582.0 fails to install

Aspirant

Re: Freedome WinPC update 1.0.582.0 fails to install

Seems HTTPS was compromised while trying to download.

 

Looking at the connection and download/transfer information was at a crawl and upload data was massive.  Any thought about an attempt to upload my data without permission?

 

Current Connections (Standard)
prot
local
remote
program
l7_prot
tx
rx
tx/s
rx/s
time
rtt
class
tcp 198.18.18.250:49623 5.10.111.221:443 chrome.exe SSL_C 26031 1495K 373 23268 1m 8s 1483 higher
tcp 198.18.18.250:49582 72.21.91.97:443 chrome.exe SSL_C 8993 202K 0 0 3m 29s 279 higher
tcp [fc00:fed0:0:1002::10bd]:49310 [2607:f8b0:4001:c1b::bc]:5228 chrome.exe SSL_SPDY_C 3305 7736 0 0 20m 25s 84 higher
tcp 198.18.18.250:49625 162.246.167.197:80 fsorsp.exe HTTP_C 473 685 0 0 52.525s 45 idle
udp 198.18.18.250:889 198.18.18.251:889 spd.exe Unknown 2896 0 1351 0 13.509s - higher