I'm sharing some executable loot with a less tech savvy friend and while attempting to use reputable sources as per https://fmhy.net/downloading#software-sites . Other than doing that, I also sent them these pointers:
Pointers
Just to reiterate security considerations concerning pirated software:
- Scan the files with your anti virus software. If you only have Windows Defender AND it is updated, that's mostly enough! Alternatively, upload the files to VirusTotal for a scan, but keep in mind that it sometimes gives false positives: https://www.virustotal.com/gui/home/upload
- Make a backup of your whole system before you install the software, so that in case it contains malware, you can just wipe the whole computer and restore it all. I recommend doing a full system backup to a USB stick or to an external hard drive or the likes. (Search for "backup" in the start menu, if using Windows.) Also, create a so called "bootable medium", so that in case even the recovery partition of Windows gets infected (which would make you unable to reinstall the system), you can still reinstall. (Search "bootable media/USB" in the start menu.)
- I know it sounds like a lot, but this is the price of "free" software. Unfortunately/fortunately, video and audio files are a lot easier to make sure they are not malware, because they don't have so called "executable code".
BONUS
This is not meant to scare you, nor is it exaggeration, just the reality of things:
If I had a Windows PC/laptop, and if I would use pirated software in any serious capacity (work or hobby), I would install the software on a laptop that is NOT connected to the internet (no WiFi, no network cable). I would then use a Microsoft Windows utility called TCPView from Microsoft's Sysinternals suite ( https://learn.microsoft.com/en-us/sysinternals/downloads/tcpview ) to check what - if any - connections the software is trying to establish. If I see any connections to "weird" or unexpected websites (unrelated to the software, like fishy Chinese websites or such. Also, see: https://cs.rin.ru/forum/viewtopic.php?f=14&t=159345 ) I would BLOCK internet connectivity of the software in my Windows Firewall ( https://windowsforum.com/tutorials/block-specific-apps-network-access-with-windows-defender-firewall-advanced-security-on-windows-10-11.384955/ ).
FINALLY
You are always welcome to ask questions!
What other considerations would you be giving to a near and dear friend whose less tech savvy but for whom you are not - at least at the moment - able to vet the files? Down the line, will start using OS capable containers again, which will make this question obsolete, but until then, please advise. 😊
I consider myself quite tech savvy. Some 20 years ago I even coded for the PC, and might have run questionably sourced software a few times. Nowadays, I have a home server, do my tiny bit of tinkering. My current approach to pirated software is "nope". I find it too much trouble to still not feel safe. If there isn't an open source alternative, I'll either cough up the dough for the real deal or go without.
Thanks for sharing your story and your opinion! Hopefully, with all the warnings and scary stories I have written to my friend, they'll come to the same conclusion.