[tor-bugs] #20708 [Obfuscation/Pluggable transport]: Baidu Anti-TBB or TBB Trojanic upgrade

[Tor Bug Tracker & Wiki]

#20708: Baidu Anti-TBB or TBB Trojanic upgrade
---------------------------------------------+---------------------
 Reporter:  agentchaos                       |          Owner:  asn
     Type:  defect                           |         Status:  new
 Priority:  Very High                        |      Milestone:
Component:  Obfuscation/Pluggable transport  |        Version:
 Severity:  Major                            |     Resolution:
 Keywords:                                   |  Actual Points:
Parent ID:                                   |         Points:
 Reviewer:                                   |        Sponsor:
---------------------------------------------+---------------------

Comment (by dcf):

 This is an error by the anti-virus program. It happens frequently with
 newly released versions of Tor Browser. Please see this FAQ entry:
   https://www.torproject.org/docs/faq.html.en#VirusFalsePositives
   > Sometimes, overzealous Windows virus and spyware detectors trigger on
 some parts of the Tor Windows binary. Our best guess is that these are
 false positives — after all, the anti-virus and anti-spyware business is
 just a guessing game anyway. You should contact your vendor and explain
 that you have a program that seems to be triggering false positives. Or
 pick a better vendor.

 What the four programs you listed all have in common is that they are
 written in the Go programming language. Other parts of Tor Browser are
 written in other programming languages. This anti-virus seems to have a
 bug that causes it to mark Go programs as malware. Those programs are only
 used when you activate [https://www.torproject.org/docs/pluggable-
 transports pluggable transports]. If you don't use meek or obfs4, then Tor
 Browser will work without them.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20708#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online