FYI - Trend Micro is blocking your LO 4.1.1 download page

users
#1

Hello, it appears that 'Trend Micro Worry-Free Business Security Services' is blocking your LibreOffice 4.1.1 download page, and rating it as "Dangerous" (see attached graphic). This may be due to some 'donate' code that seems to run, or perhaps some other reason. Your download site gets blocked in both Firefox (23) and Opera (12).

If you go to the Trend Micro site safety center ( http://global.sitesafety.trendmicro.com/ ), and enter the url " http://download.documentfoundation.org/libreoffice/stable/4.1.1/win/x86/LibreOffice_4.1.1_Win_x86.msi ", it will return a "Dangerous" rating, with the following explanation: "/The latest tests indicate that this URL contains malicious software or phishing./"

Just thought I'd pass this info along.

Regards,
Paul Hayward

#2

Hi :slight_smile:

I don't know why "Trend Micro" would block our site when you use Firefox or Opera.  I've never heard of "Trend Micro" and wonder if it's a Microsoft tool or some other 3rd party that has a vested interest in locking you in to only buying products from themselves.  Perhaps they need people to pay a fee and register with them in order to be considered 'safe' in a similar way to the certificate system that MS use for their web-browser.

If you were to copy any of our pages to your machine and then scan them then almost all anti-virus programs find them completely safe.  Similarly with our downloads.  1 person did report that Avira had a false positive but i think Avira have fixed that now.

Thanks for letting us know about the issue as other people might consider it "a blocker" if their security gives a warning.  I'm passing your message (below) on to our "Websites Team".

Thanks and regards from

Tom :slight_smile:

#3

Hello Tom,

I've never heard of "Trend Micro" and wonder if it's a Microsoft tool
or some other 3rd party that has a vested interest in locking you in to
only buying products from themselves.

A quick internet search reveals that they're a UK firm selling security
software for private & business users. I suspect their software is
giving a false positive.

Trend Micro's url, should you be interested, is
http://www.trendmicro.co.uk/

#4

Hi :slight_smile:
Yes, i was able to find it by a google search but my point was that they are not particularly well known.  I'm sure everyone could probably "reel off" maybe half-dozen to a dozen names or more without even pausing for breath.  Probably 4 would appear on nearly everyone's list but people's last few choices might vary.  I can't imagine more than 2 or 3 people would have "Trend Micro" on their list.

Of course one disadvantage with using well-known security is that more people are more familiar with trying to break through it or disable it.  Also fame is not necessarily a good indicator of quality and i can think of a few excellent programs that never got the recognition they deserved.

However when famous security program fails there are usually stories about it and people find out fairly quickly.  With something obscure, when it goes wrong there might never be any announcement anywhere, or they might have too few users and not even realise they have a problem
Regards from
Tom :slight_smile:

#5

Hi :slight_smile: Yes, i was able to find it by a google search but my point was that they are not particularly well known.  I'm sure everyone could probably "reel off" maybe half-dozen to a dozen names or more without even pausing for breath.  Probably 4 would appear on nearly everyone's list but people's last few choices might vary.  I can't imagine more than 2 or 3 people would have "Trend Micro" on their list.

it is well-known to pc magazine; here is a recent review:

<http://www.pcmag.com/article2/0,2817,2410155,00.asp>

Rubenking does point out that "Trend Micro doesn't participate in testing with all of the independent labs. Those that do test Trend Micro technology rate it good, not great."

it also made their best of the current crop of antivirus ware. <http://www.pcmag.com/article2/0,2817,2372364,00.asp>

I don't do Windows and I've heard of it for yrs. I'd be wary of calling it 'obscure' but it is not among 'the best known'.

F.

#6

Hi,

Hi :slight_smile:
Yes, i was able to find it by a google search but my point was that they are not particularly well known. I'm sure everyone could probably "reel off" maybe half-dozen to a dozen names or more without even pausing for breath. Probably 4 would appear on nearly everyone's list but people's last few choices might vary. I can't imagine more than 2 or 3 people would have "Trend Micro" on their list.

I think Trend Micro is well enough known and used that I think it would be a good idea if someone from LibreOffice contacts them and finds out why in particular LO is getting bad marks.

Werner

#7

Hi :slight_smile:
I tried to forward the original fyi to the Websites Team so that they can look into it but now that i look at their Nabble lists i see it didn't get through.  Is anyone here actually subscribed to their mailing list and able to copy the original message to them?
Apols and regards from
Tom :slight_smile:

#8

Hello Tom,

Yes, i was able to find it by a google search but my point was that
they are not particularly well known.  I'm sure everyone could probably

I failed to pick up on that. You're right of course, internationally,
they're something of a non-entity. With a gmail address, it's
impossible to know where Paul (the OP) is located.

#9

I believe it was previously known as PC-cillin for quite a few years. I
used it under that name for a number of years and also after it changed
to "Trend Micro." Can't speak to how good it is/was.

#10

For Windows security, I use at least the following:

Comodo Internet Security Suite - the free version - that included a
great anti-virus and firewall system, plus more. The paid version has
even more security "stuff" included.

WOT - Web of Trust - which is a browser add on that "rates" the links in
a Google search. Also, if you type in a URL, the package will detect if
the site has a "bad rep" and ask you if you really want to go to that
site. It does a few other things as well.

If needed, there are some "safe" DNS services that will not allow you to
"see" the bad URLs. They are removed from the "system" so you cannot
find the IP address of the "bad" sites.

There are other packages, but for a business, I do think the full
security suite from Comodo and WOT are the two main packages you should
use. These would replace the "Trend Micro" system. Comodo is one of
the top security package, in both the free and paid lists, last time I
checked.

Of course, if your business required a system wide "IP blocker" to stop
their workers from watching porn or other non-business "activities",
that is a different story and most likely will be an network router
based system with a black and white listing options.

#11

As of today Sept. 3, 2013 the below mentioned site reports that libreoffice's download site is Safe and The latest tests indicate that this URL contains no malicious software and shows no signs of phishing.

So it seems that someone got through and resolved the issue. Of course this assumes that your system does not come into play on this as I'm running Linux (Fedora 19) using FF 23.0.1 and not MS Windows.