1416150 - Firefox has a signing issue according to Ransomwhere

Status: RESOLVED INCOMPLETE

(Firefox :: Untriaged, defect)

Description

[alexander.forsen]

Attachment: Skärmavbild 2017-11-10 kl. 08.57.03.png

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_1) AppleWebKit/604.3.5 (KHTML, like Gecko) Version/11.0.1 Safari/604.3.5

Steps to reproduce:

I have installed Ransomwhere (https://objective-see.com/products/ransomwhere.html).


Actual results:

Ransomwhere warns that Firefox has signing issues.


Expected results:

Loading the site without any warning.

Comment 1

[:Gijs (he/him)]

I have no idea how 'ransomwhere' is trying to detect ransomware, but uh, our cache files aren't ransomware... Unhiding because there's no point keeping this as a security bug.

Comment 2

[alexander.forsen]

Background on detection: https://objective-see.com/blog/blog_0x0F.html

Comment 3

[Marius Coman [:mcoman], Ecosystem QA]

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:59.0) Gecko/20100101 Firefox/59.0 
Firefox: 59.0a1, Build ID 20171114100042

I have not managed to reproduce the issue on Mac 10.13, Windows 10 x64 and Ubuntu 14.04 x64, with Firefox release (57.0) and the latest Nightly (59.0a1) build installed. I've installed the RansomWhere software, I've opened Firefox, navigated to ~100 different websites (including the https://www.expressen.se ) and no warning appeared. 

Can you please retest this issue on Firefox release (57.0) and on latest Nightly build using a new clean Firefox profile, to eliminate custom settings as a possible cause (https://goo.gl/AR5o9d)?

Also, if the issue is not reproducible on a new profile, you could try to delete the "cache2" folder from >Users/username/Library/Caches/Firefox/Profiles/profile_name/ and see if the issue is still reproducible.

Comment 4

[Marius Coman [:mcoman], Ecosystem QA]

Marking this as Resolved - Incomplete due to the lack of response from the reporter.
If anyone can still reproduce it on the latest versions, feel free to reopen the issue and provide more information.