<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Like.<br><br>Sent from mom's <span style="font-size: 13pt;">iPad</span></div><div><br>On Oct 15, 2015, at 9:57 AM, Dan Smith via chirp_users <<a href="mailto:chirp_users@intrepid.danplanet.com">chirp_users@intrepid.danplanet.com</a>> wrote:<br><br></div><div><blockquote type="cite"><span>Every few months we get a message like this to the mailing list. It's</span><br></blockquote><blockquote type="cite"><span>usually one of the smaller antivirus packages reporting a virus. So</span><br></blockquote><blockquote type="cite"><span>far they have all been false positives. My guess is there are actual</span><br></blockquote><blockquote type="cite"><span>viruses out there using Python libraries, and not realizing they're</span><br></blockquote><blockquote type="cite"><span>looking at popular open source software, the antivirus company flags</span><br></blockquote><blockquote type="cite"><span>it.</span><br></blockquote><span></span><br><span>Yep, and just to further explain how these builds are created for those</span><br><span>that are interested (and/or are wondering how we attempt to protect our</span><br><span>users who trust our builds):</span><br><span></span><br><span>Every night, when a change is pending, the build server literally builds</span><br><span>an entirely new Windows 7 virtual machine with known-good copies of all</span><br><span>of our base dependencies. It then creates the new chirp build on that</span><br><span>machine and uploads it to the chirp website. When it's done, it</span><br><span>*destroys* the temporary machine it created. The next day, the whole</span><br><span>thing starts from scratch.</span><br><span></span><br><span>The process takes about 10 minutes total and occurs on an almost</span><br><span>completely sealed private network. There's really no opportunity for</span><br><span>anything to get on the build machine and disrupt the process, and it</span><br><span>certainly wouldn't change day-to-day, build-to-build.</span><br><span></span><br><span>--Dan</span><br><span>_______________________________________________</span><br><span>chirp_users mailing list</span><br><span><a href="mailto:chirp_users@intrepid.danplanet.com">chirp_users@intrepid.danplanet.com</a></span><br><span><a href="http://intrepid.danplanet.com/mailman/listinfo/chirp_users">http://intrepid.danplanet.com/mailman/listinfo/chirp_users</a></span><br><span>To unsubscribe, send an email to <a href="mailto:chirp_users-unsubscribe@intrepid.danplanet.com">chirp_users-unsubscribe@intrepid.danplanet.com</a></span><br></div></body></html>