[gwt-contrib] Re: Avira is showing warning when accessing gwt-generated files

2010-01-14 Thread FaTompa
These warnings has popped up for many compiled GWT applications for me. The threat is that hidden malicious code can exist inside the JavaScript. So, GWT is under heavy threats node due to their js compilation. There's a quite random state whether the virus signature is found or not, so i hope that

Re: [gwt-contrib] Re: Avira is showing warning when accessing gwt-generated files

2009-12-10 Thread Matt Mastracci
I got a report of a user seeing the same signature on our website. I've got a second submission in the queue to cover that one as well. They've got a testing license that I should be able to download and use to reduce when I have a second. On 2009-12-09, at 11:29 AM, Joel Webber wrote: > We

Re: [gwt-contrib] Re: Avira is showing warning when accessing gwt-generated files

2009-12-09 Thread Matt Mastracci
I just submitted the samples a short while ago. The status is currently "Our Virus Research Team still works on your submission". The automated system gave me these URLs to follow the progress of the submission. I hope something useful will show up here when they are processed: http://anal

Re: [gwt-contrib] Re: Avira is showing warning when accessing gwt-generated files

2009-12-09 Thread Joel Webber
Were you able to get any information on the signature (assuming it's signature-based) from Avira? Their page on the subject is, uh, less than useful. On Wed, Dec 9, 2009 at 1:09 PM, Matt Mastracci wrote: > We've just had reports of people seeing this while installing our > chrome extension. I'm

Re: [gwt-contrib] Re: Avira is showing warning when accessing gwt-generated files

2009-12-09 Thread Matt Mastracci
We've just had reports of people seeing this while installing our chrome extension. I'm not near a Windows VM right now, but I can see if it's easy to reproduce when I get back: http://getsatisfaction.com/dotspots/topics/dotspots_plugin_for_chrome_installer_problems There's a lot of embedded

Re: [gwt-contrib] Re: Avira is showing warning when accessing gwt-generated files

2009-11-30 Thread Joel Webber
If you can find out what was triggering this from Avira, I'd really like to see it. This is probably the third-ish time we've seen a report like this, and it would be really helpful to understand what kind of virus snippets they're looking for. If there's something we can do in our code gen to avoi

[gwt-contrib] Re: Avira is showing warning when accessing gwt-generated files

2009-11-30 Thread Thomas Broyer
On Nov 30, 3:43 pm, BobV wrote: > On Sat, Nov 28, 2009 at 10:54 AM, Ray Ryan wrote: > > Does one app make heavier use of CssResource than the other? A bell is > > ringing about mhtml security concerns. Or did we back out our mhtml use? > > I disabled MHTML support in r6839 (trunk) and r6840 (2.0

Re: [gwt-contrib] Re: Avira is showing warning when accessing gwt-generated files

2009-11-30 Thread BobV
On Sat, Nov 28, 2009 at 10:54 AM, Ray Ryan wrote: > Does one app make heavier use of CssResource than the other? A bell is > ringing about mhtml security concerns. Or did we back out our mhtml use? I disabled MHTML support in r6839 (trunk) and r6840 (2.0) because it has too many browser/OS gotcha

Re: [gwt-contrib] Re: Avira is showing warning when accessing gwt-generated files

2009-11-28 Thread Ray Ryan
Does one app make heavier use of CssResource than the other? A bell is ringing about mhtml security concerns. Or did we back out our mhtml use? On Nov 28, 2009 7:22 AM, "Thomas Broyer" wrote: On 28 nov, 12:29, dflorey wrote: > Thanks for your suggestion! I've uplo... My boss is using Avira on h

[gwt-contrib] Re: Avira is showing warning when accessing gwt-generated files

2009-11-28 Thread Thomas Broyer
On 28 nov, 12:29, dflorey wrote: > Thanks for your suggestion! I've uploaded a generated file and will > post the response to this thread. > I was wondering if all gwt-generated files will be classified as > malware by Avira or if it depends on some generated javascript > snippets. My boss is u

[gwt-contrib] Re: Avira is showing warning when accessing gwt-generated files

2009-11-28 Thread dflorey
Thanks for your suggestion! I've uploaded a generated file and will post the response to this thread. I was wondering if all gwt-generated files will be classified as malware by Avira or if it depends on some generated javascript snippets. On Nov 24, 4:58 pm, Matt Mastracci wrote: > The best appr

Re: [gwt-contrib] Re: Avira is showing warning when accessing gwt-generated files

2009-11-24 Thread Matt Mastracci
The best approach is probably to upload the file in question to Avira's false-positive reporting page: http://analysis.avira.com/samples/index.php On 24-Nov-09, at 8:19 AM, dflorey wrote: > Am I the only one with this issue? > > On 19 Nov., 17:29, dflorey wrote: >> Hi, >> since a few weeksAvi

[gwt-contrib] Re: Avira is showing warning when accessing gwt-generated files

2009-11-24 Thread dflorey
Am I the only one with this issue? On 19 Nov., 17:29, dflorey wrote: > Hi, > since a few weeksAviraAntiVir is generating warnings when accessing > gwt-generated files: > > When accessing data from the URL, "http:// > allcontacts.southpolecarbon.com/sharedcontacts/ > C7C22E75261E4D2C9C7FAF82B71C40