[carbonmachine]

The top 1000 has a lot of software. The thought of running pirated software always filled me with unease, having been burned by malware in my younger days. Only tangentially related to this really well done torrent search (so snappy!), but does anyone have a feel for how safe this software is in general? Do security firms do any analysis on it?

[kasumis_]

We have an AI based differentiater which detects fake or malware infested torrents. However, since this is alpha state and is used sometimes. Once we are satisfied, it will be deployed. We still have deployed different mechanism to detect and fake torrents. There is also Voting and commenting for the community

[BinaryIdiot]

Growing up I heard horror stories of people pirating versions of Windows, Office, etc that had backdoors installed. If you download pirated software there isn't a real way to know for 100% certainty that it isn't laced with something.

So I avoid it like the plague. Even if the majority don't have anything it only takes the one and then, depending on its level of sophistication, you're screwed.

[sergiotapia]

Pirating Windows is pretty stupid these days. You can download the official MS ISO from their website, and buy a real key from some subreddits for like $20.

The keys they sell are those bulk keys large companies get, their IT dep guy wants to make some extra coin on the side. But they work.

[floatboth]

Also:

- if you bought a laptop with preinstalled Windows, you can activate a fresh install with the key that's stored in the laptop (in ACPI tables IIRC). Just make sure it's the same edition and language.

- if you're a student, check if you have DreamSpark (er, Imagine) Premium. Apparently Windows Server is available even in the non-Premium program (for all students).

[ComputerGuru]

> you can activate a fresh install with the key that's stored in the laptop (in ACPI tables IIRC).

Free tool we developed to quickly grab that key: http://neosmart.net/OemKeyTool/

[Freak_NL]

> The keys they sell are those bulk keys large companies get, their IT dep guy wants to make some extra coin on the side. But they work.

What is the legality of that? The IT-guy is probably violating his corporation's license with Microsoft, but does that affect you as buyer? I suspect that you may run afoul of anti-fencing laws in a lot of jurisdictions (where buying goods you can reasonably suspect are fenced is illegal as well).

[camus2]

Aren't keys tied to computers these days?

> The keys they sell are those bulk keys large companies get, their IT dep guy wants to make some extra coin on the side

Which make these keys as illegal as pirating Windows. Obviously it is a more secure solution though.

[thinkloop]

Which subs, how do you look for that?

[intoverflow2]

Don't bother with the subs just buy one off ebay for $5 instead it's the same thing and the subs are just as shady but charge more.

[ChoGGi]

https://hardforum.com/threads/fs-windows-7-8-1-10-server-12-...

[y4mi]

i think we can be quite certain that there are backdoors into windows also without it being pirated, so your phrasing makes it easy to argue back.

i'd personally argue with the backdoors hidden by the pirates are significantly more likely to be used for nefarious things than the 'official' ones, as whitehats are responsible for the former, while blackhats created the latter.

[slg]

My favorite was all the pirated copies of Windows 10 that were floating around that supposedly had the telemetry features removed. It always confused me who exactly those were targeting.

[TeMPOraL]

My guess: one's mother / uncle / neighbour who wants Windows 10 on his/her laptop, but heard about it spying on you and does not want that.

I know that the usual rule of thumb is that "normals don't understand or care about complicated technical issues" such as privacy. But Windows 10 telemetry was so widely discussed in media, that I noticed even the non-tech people around me were refusing to upgrade from Win8 to Win10 on the basis of "I heard it spies on you".

[cm2187]

Lots of non technical people I know find that creepy without really being sure of what to do about it.

[Beltiras]

And the crying shame there is that Win8 did the same sort of spying.

[omtinez]

Actually, no. Microsoft instrumented essentially every OS component (and sharing backend infrastructure, universal telemetry client, etc.) starting in Windows 10. Prior to that, it was just a few isolated pieces that had their own kind of telemetry.

[morganvachon]

Not quite. Windows 8 had most of the same telemetry, but it was off by default and you were given the option to turn it on during or after installation. Windows 10 flipped that on its head by giving you a page during install that said "get started quickly" which automatically turned everything on, and there was a tiny text link at the bottom which said "customize". Clicking that gave you three pages of telemetry-related toggles that you had to manually click to turn off. Even then, basic telemetry (anonymized usage data and crash reports) is still sent to them.

After Windows 10 was released, Microsoft started backporting most of its telemetry capabilities to Windows 8 and 7 and turning them on by default, rendering those versions just as "backdoored" as 10. That was what pushed me to accept that Windows was never going to get better in that regard, and so I've upgraded all my Windows 7 and 8 machines (except my Surface RT obviously) to take advantage of the new features. I'm especially enjoying native NVMe support on my new workstation build; I can't go back to a spinning HDD without feeling like I've stepped 20 years into the past.

[intoverflow2]

The same kids who believe "Turn off your virus checker when running the crack because it shows up as a false positive"

[leni536]

> isn't a real way to know for 100% certainty that it isn't laced with something.

There are iso hashes on MSDN. You can read them with a free account.

[IceyEC]

With some things you can get a hash of an iso from the true source and compares that to the downloaded iso

[belorn]

Security in this space is based on reputation and trust. Users and groups who has a long history of uploading files with no malware is more trusted than freshly created accounts.

To make a analogy, imagine a world where there existed no government food inspectors. I would expect that visiting restaurants would become more dangerous, but my behavior would also change. I would only visit established places where people before me have eaten and proven that the food aren't poisonous.