If you think a bug might affect users in the 57 release, please set the correct tracking and status flags for Release Management.

Investigate effect of anti-virus/local firewalls on stub installer

RESOLVED INCOMPLETE

Status

Release Engineering
General Automation
RESOLVED INCOMPLETE
5 years ago
4 years ago

People

(Reporter: catlee, Assigned: catlee)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Assignee)

Description

5 years ago
We didn't get the kind of uptake we were hoping for in the initial stub installer experiment. One theory as to why is that local virus scanners or firewalls could be preventing it from working, or at least popping up a warning that dissuades users from continuing with the installation.

The stub installer here: https://ftp.mozilla.org/pub/mozilla.org/firefox/releases/stub/Firefox%2017.0b1%20Beta%20Stub%20Installer.exe

virustotal says both are ok:
https://www.virustotal.com/url/af3064d8cc97a4fea5c1e4f21da8d6a0d6aa40ceaa2e7d2444a0aeaf3772e333/analysis/1350412706/
https://www.virustotal.com/url/0d3fa292c781a73f19fe4aebce8dfef16a7785e5f8153b3a54cdac53e476c8da/analysis/1350412414/

Juan mentioned that F-Secure was one of the products the gave a warning. Is this reproducible?
(Assignee)

Updated

5 years ago
Flags: needinfo?(jbecerra)

Updated

5 years ago
Blocks: 322206
I haven't been able to reproduce in the machine where I was seeing this. It doesn't help that the program has been removed from it, and I can't find a trial version that let's me install without providing billing details. I've registered to be a beta user, and I'm waiting for registration confirmation.

I'll report back when I can install it.
Flags: needinfo?(jbecerra)
My understanding is that the stub installer will not download the actual package from an SSL site, and so the the stub installer is not doing similar checks on a SSL certificate as bug 770594, since there's no SSL happening. But, if we're still downloading the actual package from an SSL site, then issues like bug 770594 should be investigated.
(Assignee)

Comment 3

5 years ago
juan - any update here?
I received a beta tester invitation, but the list of projects I am offered to participate in does not include their consumer software using F-Secure. I'll cc Marcia since I think she installed F-Secure previously.
(Assignee)

Comment 5

5 years ago
Any updates here?
Flags: needinfo?(mozillamarcia.knous)
Created attachment 673354 [details]
F-Secure warning when running the stub-installer

I was able to install a trial version of F-Secure on a clean VM, and then downloaded the stub-installer from today's latest-mozilla-aurora using IE. I made sure F-Secure was running and ran the installer, and sure enough it popped up a warning.
(Assignee)

Comment 7

5 years ago
Haven't heard back from any AV vendors.
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Flags: needinfo?(mozillamarcia.knous)
Resolution: --- → INCOMPLETE
Product: mozilla.org → Release Engineering
You need to log in before you can comment on or make changes to this bug.