HackerTrans
TopNewTrendsCommentsPastAskShowJobs

zx2c4

no profile record

Submissions

WireGuard for Windows Reaches v1.0

lists.zx2c4.com
146 points·by zx2c4·3 miesiące temu·9 comments

Version 1.0 Released: WireGuard for Windows and WireGuardNT

lore.kernel.org
22 points·by zx2c4·3 miesiące temu·2 comments

Version 1.0 of WireGuard for Windows and WireGuardNT Released

lists.zx2c4.com
6 points·by zx2c4·3 miesiące temu·0 comments

WireGuard makes new Windows release following Microsoft signing resolution

lists.zx2c4.com
549 points·by zx2c4·3 miesiące temu·166 comments

WireGuard to only support Windows 10 and up

lists.zx2c4.com
3 points·by zx2c4·4 miesiące temu·0 comments

comments

zx2c4
·3 miesiące temu·discuss
It's associated per-peer, so it assures a cryptographic mapping between src ip and public key.
zx2c4
·3 miesiące temu·discuss
It's like a routing table on the way out and an ACL on the way in. Maybe an easier way to think of it.
zx2c4
·3 miesiące temu·discuss
I likewise wonder from time to time whether I should replace WireGuard's allowedips.c trie with something better: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...
zx2c4
·3 miesiące temu·discuss
Thank you! I'm glad somebody appreciates it. A lot of thought has gone into the installer and upgrade aspect.
zx2c4
·3 miesiące temu·discuss
Good question! I've never tried. The NT driver makes use of some of the more advanced features of the networking stack, so possibly not. But you never know. I'd love a Wg4React.
zx2c4
·3 miesiące temu·discuss
This was just for WireGuardNT, the kernel driver for the NT kernel that Windows uses.

This project -- https://git.zx2c4.com/wireguard-nt/about/ -- is used by this app -- https://git.zx2c4.com/wireguard-windows/about/ . The former is what the signing situation was about. The latter is just signed using a normal boring (but very expensive!) EV code signing certificate from one of the CAs.
zx2c4
·3 miesiące temu·discuss
As I mentioned in the mailing list post, the Microsoft paperwork shuffling matter got dealt with rather quickly, following all the attention the HN thread from the other day got. And now we're finally out with an update!

NT programming is a lot of fun, though this release was quite challenging, because of all of the toolchain updates. On the plus side, we got to remove pre-Win10 support -- https://lists.zx2c4.com/pipermail/wireguard/2026-March/00954... . But did you know that Microsoft removed support for compiling x86 drivers in their latest driver SDK? So that was interesting to work around. There was also a fun change to the Go runtime included in this release: https://github.com/golang/go/commit/341b5e2c0261cc059b157f1c...

All and all, a fun release, and I'm happy to have the Windows release train cooking again.
zx2c4
·3 miesiące temu·discuss
Microsoft got in touch. All sorted out now.
zx2c4
·3 miesiące temu·discuss
Hopefully soon, Microsoft-willing.
zx2c4
·3 miesiące temu·discuss
No. The humans just said 60 days.
zx2c4
·3 miesiące temu·discuss
Encouraged by this thread, I tweeted about it: https://x.com/EdgeSecurity/status/2041872931576299888
zx2c4
·3 miesiące temu·discuss
This is the same problem I'm currently facing with WireGuard. No warning at all, no notification. One day I sign in to publish an update, and yikes, account suspended. Currently undergoing some sort of 60 days appeals process, but who knows. That's kind of crazy: what if there were some critical RCE in WireGuard, being exploited in the wild, and I needed to update users immediately? (That's just hypothetical; don't freak out!) In that case, Microsoft would have my hands entirely tied.

If anybody within Microsoft is able to do something, please contact me -- jason at zx2c4 dot com.
zx2c4
·7 miesięcy temu·discuss
Voila:

https://github.com/WireGuard/wireguard-android/pull/82 https://github.com/WireGuard/wireguard-android/pull/80

In that first one, the double pasted AI retort in the last comment is pretty wild. In both of these, look at the actual "files changed" tab for the wtf.
zx2c4
·w zeszłym roku·discuss
I was curious upon seeing this and found the thread where its inclusion was turned down: https://sourceforge.net/p/sevenzip/discussion/45797/thread/a...