Closed Bug 559111 Opened 15 years ago Closed 11 years ago

Should we detect and warn users of malware in UA strings?

Categories

(www.mozilla.org :: General, defect)

defect
Not set
major

Tracking

(Not tracked)

RESOLVED WONTFIX

People

(Reporter: abuchanan, Unassigned)

References

()

Details

We've had a couple bugs regarding malware munging User Agent strings, such as the one this is cloned from (see below). Someone suggested we could try to detect this and warn the user. Considering the variety of malware, it sounds very difficult. Possibly there's a service we could use. Is that feasible and something we want to pursue? +++ This bug was initially created as a clone of Bug #506426 +++ Someone with the following user-agent string: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.12) Gecko/2009070611 Firefox/3.0.12 WinNT-PAI 12.06.2009 AutoPager/0.5.2.2 (http://www.teesoft.info/) reported getting the "We’re sorry to report this, but your computer does not meet the minimum system requirements to run this version of Firefox." I'm yet to find out what is automatically adding the "WinNT-PAI" to the string, but for the purpose of this bug it's clearly failing to grab the first "NT 5.1" that is in the string - I reproduced the problem by manually adding "WinNT-PAI" bit to the end of mine.
My two cents: we're not in the business of detecting malware, and unless that's the business we want to get into we shouldn't be going out of our way to do something. But, if in the normal course of business we happen to notice something fishy it would only be neighborly to mention it. So, if there is something obvious we should give them a heads-up, hopefully with a link on where to get further help. But we should not become the final arbiter who decides what belongs into the UA string and what doesn't.
Component: www.mozilla.org/firefox → www.mozilla.org
Closing old Mozilla.org website bugs due to them not being relevant to the new Python-based Bedrock system. Re-open if this is a critical bug and should be resolved on the new system too.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WONTFIX
Absolutely unrelated to any "Bedrock" system.
Status: RESOLVED → REOPENED
Resolution: WONTFIX → ---
Component: www.mozilla.org → General
Product: Websites → www.mozilla.org
Google is doing a malware detection. I think that would help. http://news.cnet.com/8301-1009_3-20080917-83/google-adds-malware-warning-to-search-results/
Status: REOPENED → RESOLVED
Closed: 12 years ago11 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.