brent timothy saner on 31 May 2015 18:38:23 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] SourceForge has Malware?


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 05/31/2015 09:32 PM, Anthony Martin wrote:
> Just wondering if anyone knows if theres truth to this or not? (sorry if
> this is old news)
> http://helb.github.io/goodbye-sourceforge/


http://sdtimes.com/sd-times-blog-sourceforge-now-a-source-of-malware/

http://arstechnica.com/information-technology/2015/05/sourceforge-grabs-gimp-for-windows-account-wraps-installer-in-bundle-pushing-adware/
(their response is laughable, since it doesn't really address the actual
concert of unwanted third-party software:
https://sourceforge.net/blog/gimp-win-project-wasnt-hijacked-just-abandoned/
)


http://www.reddit.com/r/sysadmin/comments/1kxuul/beware_of_sourceforge_downloads_new_owner_is/


http://webcache.googleusercontent.com/search?q=cache:ZyIMVTrOkmoJ:trac.filezilla-project.org/ticket/8888+&cd=3&hl=en&ct=clnk&gl=us

etc.




so yeah, sourceforge is (and has) distributing unwanted third-party
software- adware, malware, etc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQIcBAEBCgAGBQJVa7d/AAoJEIwATC+TSB9r0NsQAKXegMTEH+fnrc1LV0JvAeG4
dd/zVvlTgD8KoWJOS1vLQqcW1M2/OnEUz3BRnvO1GD9wTIDamKQ+Gdp8niKYauAq
tZBQ9sg37eMNBVIxWK+sDGn/bCs8rc3boKNaQYWkqo9QL/Vn7S1sRoipwLJz6OcI
GqfmyXxZoXF4F/0vyO3PGGbfvGd5OByIHLMuG1n2rucBH1UNBxe/j2hxe+umjqNW
YTWcxWGhlBYLMHd5X7zZsSeeZiQQnS++luQgEilLUhOXTHDiEB3NttSVBmo2FZQJ
c6/c3AwazMDkjRlsIwxjjMHKbAO4h3MvELA9p+PWV2WnsyUPJzYRtcrRAIa8LLvU
rw5oeyEZkYuez1zIXlh5kGMO/YtHG3rhfLDYzta7Mga6MAMIxQ7vg7bCWXm32jt0
X1ui5Pn/ljYTB9232p1Wq8zFxP+kS+xSAdzL8v+HllIp0fGfeZSOv+9se2kFndDi
0ZOn3R5tef79e9FlQC5Mv6YmRU5QEwhPtPDl3Ywb565vJllvWUiEMgUsxAj9A5CY
fsMbbMpzXpJTDX8QRVpGe0NsnTNQq4Aq/dT3s8MaqYpvm7qP7duGOBBbBIvaqaSc
dNctbTunABCQkFdx5aAwmolgXZITrOTRuzykbOgJACPGckB7iiXB80Jk3MmrjDBa
/rvBcNMuE1zdo7oaCYk0
=MTJT
-----END PGP SIGNATURE-----
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug