HackerTrans
TopNewTrendsCommentsPastAskShowJobs

zx2c4

no profile record

Submissions

WireGuard for Windows Reaches v1.0

lists.zx2c4.com
146 points·by zx2c4·vor 3 Monaten·9 comments

Version 1.0 Released: WireGuard for Windows and WireGuardNT

lore.kernel.org
22 points·by zx2c4·vor 3 Monaten·2 comments

Version 1.0 of WireGuard for Windows and WireGuardNT Released

lists.zx2c4.com
6 points·by zx2c4·vor 3 Monaten·0 comments

WireGuard makes new Windows release following Microsoft signing resolution

lists.zx2c4.com
549 points·by zx2c4·vor 3 Monaten·166 comments

WireGuard to only support Windows 10 and up

lists.zx2c4.com
3 points·by zx2c4·vor 4 Monaten·0 comments

comments

zx2c4
·vor 3 Monaten·discuss
It's associated per-peer, so it assures a cryptographic mapping between src ip and public key.
zx2c4
·vor 3 Monaten·discuss
It's like a routing table on the way out and an ACL on the way in. Maybe an easier way to think of it.
zx2c4
·vor 3 Monaten·discuss
I likewise wonder from time to time whether I should replace WireGuard's allowedips.c trie with something better: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...
zx2c4
·vor 3 Monaten·discuss
Thank you! I'm glad somebody appreciates it. A lot of thought has gone into the installer and upgrade aspect.
zx2c4
·vor 3 Monaten·discuss
Good question! I've never tried. The NT driver makes use of some of the more advanced features of the networking stack, so possibly not. But you never know. I'd love a Wg4React.
zx2c4
·vor 3 Monaten·discuss
This was just for WireGuardNT, the kernel driver for the NT kernel that Windows uses.

This project -- https://git.zx2c4.com/wireguard-nt/about/ -- is used by this app -- https://git.zx2c4.com/wireguard-windows/about/ . The former is what the signing situation was about. The latter is just signed using a normal boring (but very expensive!) EV code signing certificate from one of the CAs.
zx2c4
·vor 3 Monaten·discuss
As I mentioned in the mailing list post, the Microsoft paperwork shuffling matter got dealt with rather quickly, following all the attention the HN thread from the other day got. And now we're finally out with an update!

NT programming is a lot of fun, though this release was quite challenging, because of all of the toolchain updates. On the plus side, we got to remove pre-Win10 support -- https://lists.zx2c4.com/pipermail/wireguard/2026-March/00954... . But did you know that Microsoft removed support for compiling x86 drivers in their latest driver SDK? So that was interesting to work around. There was also a fun change to the Go runtime included in this release: https://github.com/golang/go/commit/341b5e2c0261cc059b157f1c...

All and all, a fun release, and I'm happy to have the Windows release train cooking again.
zx2c4
·vor 3 Monaten·discuss
Microsoft got in touch. All sorted out now.
zx2c4
·vor 3 Monaten·discuss
Hopefully soon, Microsoft-willing.
zx2c4
·vor 3 Monaten·discuss
No. The humans just said 60 days.
zx2c4
·vor 3 Monaten·discuss
Encouraged by this thread, I tweeted about it: https://x.com/EdgeSecurity/status/2041872931576299888
zx2c4
·vor 3 Monaten·discuss
This is the same problem I'm currently facing with WireGuard. No warning at all, no notification. One day I sign in to publish an update, and yikes, account suspended. Currently undergoing some sort of 60 days appeals process, but who knows. That's kind of crazy: what if there were some critical RCE in WireGuard, being exploited in the wild, and I needed to update users immediately? (That's just hypothetical; don't freak out!) In that case, Microsoft would have my hands entirely tied.

If anybody within Microsoft is able to do something, please contact me -- jason at zx2c4 dot com.
zx2c4
·vor 7 Monaten·discuss
Voila:

https://github.com/WireGuard/wireguard-android/pull/82 https://github.com/WireGuard/wireguard-android/pull/80

In that first one, the double pasted AI retort in the last comment is pretty wild. In both of these, look at the actual "files changed" tab for the wtf.
zx2c4
·letztes Jahr·discuss
I was curious upon seeing this and found the thread where its inclusion was turned down: https://sourceforge.net/p/sevenzip/discussion/45797/thread/a...