[tor-bugs] #28175 [Applications/Tor Browser]: Add commands to upload bundles to virustotal

[Tor Bug Tracker & Wiki]

#28175: Add commands to upload bundles to virustotal
-------------------------------------+-------------------------------------
     Reporter:  boklm                |      Owner:  tbb-team
         Type:  task                 |     Status:  new
     Priority:  Medium               |  Milestone:
    Component:  Applications/Tor     |    Version:
  Browser                            |   Keywords:  TorBrowserTeam201810,
     Severity:  Normal               |  tbb-rbm, tbb-qa
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
-------------------------------------+-------------------------------------
 With each new release, some users are complaining that their Windows
 antivirus is detecting Tor Browser as a virus. A theory is that the
 antivirus is blocking programs that they have not seen before until they
 are a few days old.

 To avoid this problem (or at least try to limit the duration of the
 problem), we could upload the Windows bundles to virustotal.com as soon as
 we have a build ready, so that the antivirus have seen them a few
 days/hours before the release.

 In the past we had something as part of the testsuite uploading the
 bundles to virustotal, but it is currently broken and needs to be fixed. I
 think we could add some makefile commands to `tor-browser-build.git` such
 as `make upload-unsigned-build-virustotal-release` (with `*-signed-*` and
 `*-alpha` variants) to upload a build to virustotal (in addition to having
 it done by the testsuite, probably using the same script for both).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28175>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online