Not a question...but our security team won't unblock Configurator 4 because it has California misspelled in the signing certificate. I'm more angry at Security than at Adobe, but it is kind of a bad thing to get through...Here's my email thread (names removed for obvious reasons)...I'd like to hear what the community thinks about both the cert misspelling and the manner in which security is handling it:
(SECURITY)
Subject: RE: Request ID 151061 (I installed the newest version (4) of the Adobe Co)
Sorry but I don’t feel comfortable clearing something with a publisher that has California spelled wrong:
Username: xxxxxxxxxxxxxxxxxx
Event Source Name: Microsoft-Windows-AppLocker Raw Description: EXE{00000000-0000-0000-0000-000000000000}--S-1-5-21-79331101-1198936889-320618023-2788754 8%PROGRAMFILES%\ADOBE\ADOBE CONFIGURATOR 4\ADOBE CONFIGURATOR 4.EXEC1DDFF25DA531D31CB843D3E62E2144CB6E0D70C4BB7099FEA47424D3F0ECF7CO=ADOBE SYSTEMS INCORPORATED, L=SAN JOSE, S=CALLIFORNIA, C=US\\\0.0.0.00
(ME)
Subject: RE: Request ID 151061 (I installed the newest version (4) of the Adobe Co)
It’s from the adobe web site: http://labs.adobe.com/technologies/configurator/ (http://labs.adobe.com/downloads/configurator.html)
(SECURITY)
Subject: RE: Request ID 151061 (I installed the newest version (4) of the Adobe Co)
Can we be sure Adobe’s website hasn’t been owned though?
(ME)
Subject: RE: Request ID 151061 (I installed the newest version (4) of the Adobe Co)
Are you serious?
(SECURITY)
Subject: RE: Request ID 151061 (I installed the newest version (4) of the Adobe Co)
- Absolutely.
(SECURITY)
Subject: RE: Request ID 151061 (I installed the newest version (4) of the Adobe Co)
If Adobe can confirm their signing certificate has a misspelling in it, I will clear it. Until then this type of stuff has to be taken seriously or it kind of invalidates Applocker’s purpose in helping secure our endpoints.