802295 - Investigate effect of anti-virus/local firewalls on stub installer

Status: RESOLVED INCOMPLETE

(Release Engineering :: General, defect)

Description

[Chris AtLee [:catlee]]

We didn't get the kind of uptake we were hoping for in the initial stub installer experiment. One theory as to why is that local virus scanners or firewalls could be preventing it from working, or at least popping up a warning that dissuades users from continuing with the installation.

The stub installer here: https://ftp.mozilla.org/pub/mozilla.org/firefox/releases/stub/Firefox%2017.0b1%20Beta%20Stub%20Installer.exe

virustotal says both are ok:
https://www.virustotal.com/url/af3064d8cc97a4fea5c1e4f21da8d6a0d6aa40ceaa2e7d2444a0aeaf3772e333/analysis/1350412706/
https://www.virustotal.com/url/0d3fa292c781a73f19fe4aebce8dfef16a7785e5f8153b3a54cdac53e476c8da/analysis/1350412414/

Juan mentioned that F-Secure was one of the products the gave a warning. Is this reproducible?

Comment 1

[juan becerra [:juanb]]

I haven't been able to reproduce in the machine where I was seeing this. It doesn't help that the program has been removed from it, and I can't find a trial version that let's me install without providing billing details. I've registered to be a beta user, and I'm waiting for registration confirmation.

I'll report back when I can install it.

Comment 2

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

My understanding is that the stub installer will not download the actual package from an SSL site, and so the the stub installer is not doing similar checks on a SSL certificate as bug 770594, since there's no SSL happening. But, if we're still downloading the actual package from an SSL site, then issues like bug 770594 should be investigated.

Comment 3

[Chris AtLee [:catlee]]

juan - any update here?

Comment 4

[juan becerra [:juanb]]

I received a beta tester invitation, but the list of projects I am offered to participate in does not include their consumer software using F-Secure. I'll cc Marcia since I think she installed F-Secure previously.

Comment 5

[Chris AtLee [:catlee]]

Any updates here?

Comment 6

[juan becerra [:juanb]]

Attachment: F-Secure warning when running the stub-installer

I was able to install a trial version of F-Secure on a clean VM, and then downloaded the stub-installer from today's latest-mozilla-aurora using IE. I made sure F-Secure was running and ran the installer, and sure enough it popped up a warning.

Comment 7

[Chris AtLee [:catlee]]

Haven't heard back from any AV vendors.