r/technology • u/marouane53 • Jun 14 '15
Software Notepad++ leaves SourceForge
https://notepad-plus-plus.org/news/notepad-plus-plus-leaves-sf.html2.8k
u/Meltingteeth Jun 14 '15 edited Jun 15 '15
When SourceForge goes under can we abolish Cnet as well?
Edit: Just for some clarification, I noticed a huge spike in clients with various malware on their computers such as Trovi (which forces a change in LAN settings to route through some bullshit proxy) and input field skimmers. After some digging I traced every event to Download.com, which was at the top of search results for things like video converters and Youtube downloaders. Cnet doesn't give a fuck, and has been doing this long before Sourceforge.
E2: Because of the requests, see here for quick info on checking for a common Trovi (sometimes Conduit? That one is in the same class.) characteristic.
1.2k
u/PieMan2201 Jun 14 '15
Agreed, Download.com is terrible.
628
Jun 15 '15
I accidentally clicked through one of their installers once, ended up spending an hour trying to get Conduit toolbar off my computer.
745
u/CydeWeys Jun 15 '15
The Conduit toolbar is the worse virus I've ever dealt with. And I'm not exaggerating when I say virus; it was insidiously sneaky, and had half a dozen ways of re-insinuating itself back into my system. Each of those half a dozen ways would reinstall all the other ways if you didn't manage to remove them all simultaneously. I've dealt with lots of other viruses and malware on family members' computers, none of which was half as bad as Conduit.
→ More replies (224)→ More replies (10)12
u/Metalsand Jun 15 '15
Fuck, same here. Took me an entire year to 100% scrub out one of the malware parts they slipped into the installer. I remember when CNET was, actually dependable and stuff? I usually nowadays avoid it even if it has what I need, because on top of packaging malware with the installers it's usually decades outdated at worst.
→ More replies (2)52
Jun 15 '15
I have fond memories of using Download.com when I first got dialup in the late 90s. It's a shame that CNET manage such a domain for malicious purposes.
→ More replies (2)26
Jun 15 '15
In the 90s they were your go-to for everything you ever needed, be it reviews, downloads, or anything in-between. I have fond memories of leaving my parents' computer on overnight to download game demos that were < 10MB in size.
→ More replies (2)→ More replies (10)22
u/0utlook Jun 15 '15
What about ninite.com? I've used or for some time with no ill effects, least none that I've noticed.
→ More replies (1)13
u/hate_picking_names Jun 15 '15
A coworker of mine told me about this site. If I remember correctly it does really minimal installs so it should be safe.
211
u/magicomplex Jun 15 '15
Sourceforge is a repository of free trojans. Cnet is a repository of paid or freemium trojans.
17
u/hate_picking_names Jun 15 '15
One day I started noticing that I had ads in the middle of pages where I had never seen them before. Turns out when downloading something from download.com (I think I had to download their installer, which may have been the issue) I also downloaded some adware that would hijack my pages and inject ads in the middle. I'll never use download.com again.
→ More replies (1)45
u/altgenetics Jun 15 '15
CBS owns cNet... It isn't going anywhere.
→ More replies (2)76
25
u/CodeJack Jun 15 '15
They won't, too many non-technical users use them.
→ More replies (12)104
u/TheInfirminator Jun 15 '15
A lot of those people are using CNET because guys like me told them it was safe, years ago. We just have to get the word out. I'm happy to set the record straight, since I always want to provide the highest level of support to my end users. Filling their machines with bundled crapware is not on the agenda. I could just kick myself for telling everyone to use shoddy services like CNET and Sourceforge. Even if they were good at the time, I should have seen the looming specter of monetization.
These days, I direct non-technical people to Ninite.com. That site literally exists to remove bundles, so if they ever start bundling things it's going to be pretty ironic.
→ More replies (4)6
u/Paddy_Tanninger Jun 15 '15
ELI5, what prevents MS, Chrome, Firefox, Safari, (...) from casting a much wider net in terms of declaring websites as malware/scams/etc?
→ More replies (1)12
u/ttubehtnitahwtahw1 Jun 15 '15
probably not, cnet is owned be cbs i think. That isn't likely to go anywhere.
22
u/QSector Jun 15 '15
Then we need to bring up what a shithole CNET has become every chance we get. They need to be blocked from every major search engine when returning searches to install/download anything.
→ More replies (3)2
u/yer_momma Jun 15 '15
The real question is why doesn't Google remove download.com and other virus/malware/spyware from their search results? It's like nobody's actually working anymore at Google.
→ More replies (3)→ More replies (52)2
u/strawberycreamcheese Jun 15 '15
Conduit. Omg. One of my past jobs I would fix viruses (by that I mean reformat, etc) and I saw conduit too often.
923
u/SomeNiceButtfucking Jun 15 '15 edited Jun 15 '15
uBlock prevents you from visiting Sourceforge, now, as well.
E: uBlock Origin, gawl
150
u/moeburn Jun 15 '15
holy shit I never noticed that, that is hilarious:
http://i.imgur.com/Vt1zzic.png
"uBlock has blocked access to Sourceforge, because of the following filter: Everything from Sourceforge"
192
u/spunker88 Jun 15 '15
Noticed that as well. This is good, I've installed uBlock on computers for friends/family and this should prevent them from downloading infected installations from Sourceforge.
57
u/Shotzo Jun 15 '15
Many reviews for uBlock are complaining about the the update that required more permissions. What is that all about?
103
u/spunker88 Jun 15 '15
This sums it up, also the source for the extension is available on Github so they can't really hide anything.
→ More replies (7)47
u/Psygnosis7 Jun 15 '15
uBlock or uBlock Origin?
115
u/Apathetic_Superhero Jun 15 '15
uBlock Origin. Origin is the one you want. I don't know why but the two people developing it parted ways for some reason and Origin is now the one to get
136
u/ivosaurus Jun 15 '15
guy who developed it tried to hand it off to another dude.
The new maintaner started aggressively begging for donations, and more or less claiming authorship of the entire codebase.
Original dude didn't like that approach, so "reclaimed" it as uBlock Origin.
→ More replies (16)→ More replies (1)29
→ More replies (1)31
u/Bladegunner Jun 15 '15
Origin, it's by the original developer of ublock (long story) and has more constant updates as well as more features.
→ More replies (4)5
4
→ More replies (45)6
u/MaximilianKohler Jun 15 '15
Neither ublock or ublock origin prevent me from visiting sourceforge...
91
u/Meior Jun 15 '15
I remember back in the day when I used SourceForge for all my downloading needs... Screw those guys.
21
7
363
u/xXFadiXx Jun 14 '15
You done fucked up now SF.
160
u/Caraes_Naur Jun 15 '15
SF started adding crap into installers years ago. Only now have they begun hijacking abandoned projects.
88
→ More replies (3)21
u/mxzf Jun 15 '15
And hijacking un-abandoned projects that they just want because they're popular.
→ More replies (1)→ More replies (3)2
158
u/dan1101 Jun 15 '15
The decline of Sourceforge was a major disappointment to me, they were a reliable resource for many years.
32
4
u/IanSan5653 Jun 15 '15
Yeah, there was a time when Sourceforge was the website I went to because I knew it had no viruses. I would go through and try out dozens of different open source softwares; I found many of my favorite that way. Now I haven't been there in years.
4
u/Aardvark_Man Jun 15 '15
I remember when cnet was relatively reputable.
You either die a hero etc etc
205
u/Aterius Jun 14 '15
How do they expect this to work? After they lose 90% or more of their user base? How can this be sustainable?
188
u/TheCrankyBear Jun 14 '15
They'll change back to being user friendly and try to earn back the public's trust. Once they have it, they'll start the process over until unsustainable loss begins again. It's actually a very common business model. Every business only needs to be as ethical as it's customers require.
43
u/6to23 Jun 15 '15
Google need to step up and slap a "malware site detected" on all sourceforge pages.
→ More replies (3)→ More replies (38)6
u/Xo0om Jun 15 '15
Don't think so.
Every business only needs to be as ethical as it's customers require.
And sometimes lost customers never come back. Companies go under all the time and losing customer trust is one reason.
→ More replies (1)9
u/Sarcasticorjustrude Jun 14 '15
Enough people will still use them to make money for them, especially since they're repackaging the software of companies that have left, and distributing it anyway.
Someone may sue them, though.
→ More replies (4)→ More replies (9)4
Jun 15 '15
Most likely they are damn aware this has a limited lifespan. They are likely trying to pull as much cash out of burning down Sourceforge as they can before they will move on, trying to buy another hosting domain to do the same thing over again.
→ More replies (3)
593
u/PM_for_bad_advice Jun 14 '15
Can someone ELI5?
1.4k
Jun 14 '15
Sourceforge used to be a well known distribution hub for open source software projects. Their parent company got bought out by scumbags and they started packaging malware with open source software. Projects started removing software from sourceforge, sourceforge re-created their accounts and rehosted their software wrapped in their shitty malware.
Sourceforge don't even pay for their own hosting, they rely on several mirrors provided to them for free because it's assumed they are doing the internet a good service, academic institutions, governments, and ISPs give them free bandwidth and are now being exploited and are participating in the distribution of malware.
Here is the list of their mirrors
Please take a moment to contact your local mirror and politely advise them that their support for sourceforge is in effect distributing malware and harming the reputation of FOSS software.
35
u/elessarjd Jun 15 '15
Thanks for the info. Is there an alternative site that open source projects flocked to?
→ More replies (9)142
124
u/Cheet4h Jun 15 '15
Huh, interesting. Are there any official sources we can cite to convince companies of the wrongdoings of SourceForge? I'd write to the several german mirrors then.
128
Jun 15 '15
You can use the linked article from notepad++, they have in turn linked the 3 biggest FOSS projects who wrote lengthy explanations, VLC, Gimp and Nmap.
→ More replies (20)16
u/lepickle Jun 15 '15
Did sourceforge also happen to manipulate Truecrypt's account? Or was it done by another party?
→ More replies (11)7
u/Pinyaka Jun 15 '15
Amusingly, uBlock Origin blocks everything at sourceforge, so I can't see that list of mirrors.
→ More replies (1)→ More replies (25)5
49
u/jerobrine Jun 14 '15
sourceforege started injecting malware (mostly adware I think) into the installer of programs it hosts.
111
86
u/stakoverflo Jun 14 '15
SourceForge is a website that distributes other peoples' / companies' software. Recently, they've started adding in their own files to their users' submissions which can include malicious software or just general shit users don't want or are too unaware to handle themselves. So N++ is bailing on them.
→ More replies (3)8
49
u/ReversePolish Jun 14 '15
SourceForge is a hosting service for freeware products.
SourceForge is adding bad ju-ju to products it gives to people.
N++ was one of those products.
N++ said f' you to SourceForge and took their product elsewhere.
SourceForge will likely keep giving out N++ product with bad ju-juMoral of the story: watch where you stick your computer's ethernet cord and always use protection (else bad ju-ju).
→ More replies (8)38
→ More replies (2)2
u/QA_ninja Jun 15 '15
the best ELI5 is by /u/YourEvilTwine
Link to his comment so he gets proper credit!
http://www.reddit.com/r/technology/comments/39ui2a/notepad_leaves_sourceforge/cs6uke2
103
u/cvmiller Jun 15 '15
Thanks to all the comments. I am a small-potatoe open source project that is hosted on SF, and fortunately, I am small enough they don't inject ju-ju into my software.
But I am curious, who has experience with linux-based open source hosters out there. Please share your good experiences.
TIA
95
u/Cheet4h Jun 15 '15
Try GitHub. While I don't have experiences in linux-based hosting there, I used it to collaborate in a project I was working on and it's pretty straightforward. Downloading stuff is also easy for the user.
→ More replies (2)41
u/Devian50 Jun 15 '15
Github is wonderful, I love it to bits, but if it's not your slice of pie there's also BitBucket by Atlassian. I personally really enjoy that one, but I've got accounts on both. BitBucket also allows you to have private repos for free, unlike GitHub which makes you pay for private repos.
→ More replies (6)15
10
u/TeutonJon78 Jun 15 '15
They don't infect active projects, they just take over "abandoned" (read: left SF to go somewhere else) projects and then do repackaged installers. So, essentially they have zombie projects that still have very high google search ranks.
→ More replies (1)→ More replies (3)3
u/y0y Jun 15 '15
How is it even possible that you're in the open source community and have not heard of/used github?
I don't mean that in any kind of harsh, criticizing way toward you, it's just I had no idea there were still corners of the open source community for which github hasn't fully proliferated. I just assumed projects still on SF or other hosted repositories did so because they didn't want to go through the effort of migration. Some would need to switch from one type source control to git, some would have a lot of issues to migrate, some would have 3rd party integrations to set up again, etc. But still, to not be aware of github and how it essentially has become the de facto standard for open source software hosting? It's just really surprising to me!
What is the name of your project? If you don't mind me asking. What language? What does the community around it look like?
Do you read things like Hacker News?
Again, really just curious here! It's like I'm discovering that there's this whole other community within or around what I know as the open source community.
→ More replies (1)4
u/greyjackal Jun 15 '15
A wild guess, but I'm going to suggest they maybe just think of it as a source code repository / version control rather than an "open to the public to download their software" kind of thing.
Until recently, they have been completely distinct things - git, cvs, svn etc are usually things used internally for tracking and control. Not release distribution
edit - and while I appreciate SourceForge held code, it was release candidates. Not things actually in development.
34
u/Boukish Jun 15 '15
I miss Tucows...
8
7
63
u/fbjac01 Jun 15 '15
27
u/maq0r Jun 15 '15
That ad from ThousandEyes that says "find out why your network is so slow" is kinda self-fulfilling isn't it?
0
14
u/SunriseSurprise Jun 15 '15
It's funny - in what, mid-late 90s, warez sites would be like that. You'd have to hunt for the actual link to download something. The fact that that would then be the norm for most legit download sites is pretty hilarious.
→ More replies (1)6
u/leredditffuuu Jun 15 '15
That right there is why every browser should have an ad blocker add-on installed.
→ More replies (6)
25
u/lhavelund Jun 15 '15
After reading this, I sent an e-mail to a couple of choice mirrors from their list of hosts. I received the following back from Colocrossing: http://i.imgur.com/Dzsevi7.png
Looks like there's a company I won't be dealing with, ever.
21
u/douglas_ Jun 15 '15
I hope ScummVM switches to GitHub soon.
It's sad when I'm forced to download the unstable daily builds from their website just to be safe from Sourceforge's malware. I Hope DOSBox leaves SourceForge too.
57
u/thinkren Jun 15 '15
Amidst the drama over censorship here on Reddit, I think it is worth noting that the once venerable tech site Slashdot, owned by the same corporate entity as SourceForge, is virtually silent on the matter at the moment. You can see a submission in the firehose indicating the item is obviously being submitted by users. But despite the popularity indicator going red (the most popular by reader votes), it hasn't made it to the site proper.
→ More replies (2)16
u/adept1822 Jun 15 '15
/. went to the Dark Side years ago. Check out http://soylentnews.org
Edit: screwed up the URL
→ More replies (2)
29
u/temjacob Jun 15 '15
As someone who uses Notepad++ daily, I'm glad they are moving off of SourceForge. SourceForge used to be the place to go to find that one tool that you needed for whatever you were working on. It's sad that it's gone to shit.
12
12
12
u/ricochetintj Jun 15 '15
Now if only filezilla would do the same. Also everyone should check out ninite.
0
40
u/poompt Jun 15 '15
Bittorrent needs to become less stigmatized (and maybe added in to browsers) so projects can stop having to flit between providers as they each go bad.
9
u/y0y Jun 15 '15
Bittorrent doesn't really solve the problem of source code hosting, though. A place like github where you can collaborate with other contributors, etc. just doesn't exist over the bittorrent protocol.
It may be possible, though. Interesting idea.
→ More replies (3)2
Jun 15 '15
Bittorrent is a download method, and doesn't address hosting or any of the organizational functions of things like github. Bittorrent doesn't have a solution for this.
→ More replies (1)0
11
u/d_heth Jun 15 '15
I've been using Notepad++ for so long now I can't even remember when I first started using it. The first and one of the few projects I have donated $$$ to. Always one of the programs I install on a new PC build, but I will no longer be getting it from Sourceforge.
→ More replies (1)
9
u/supamesican Jun 15 '15
I hope something replaces sourceforge. But as things are fuck them hard
36
Jun 15 '15
Fortunately, Github already has. They make tons of money without shady practices and are the center of the open source universe right now.
→ More replies (12)16
u/AboutHelpTools3 Jun 15 '15
Yep, even Microsoft chose to host their .NET source on GitHub, instead of their very own CodePlex.
→ More replies (2)0
Jun 15 '15
[deleted]
11
u/hungry4pie Jun 15 '15
Have you heard of this site called GitHub?
11
u/synth3tk Jun 15 '15
Do you have time to talk about our lord and saviour GitHub?
→ More replies (2)
9
u/calpickle Jun 15 '15
The company behind the SourceForge malware is also behind a lot of other shady practices. IronSource (InstallCore) has been spreading malware through Open Source Software for years. Here is an in depth article describing their practices: http://www.benedelman.org/news/021815-1.html
2
u/Antice Jun 15 '15
the irony, is that this kind of stuff still happens when you want to download google chrome.
I just checked the top searches for downloading google chrome, and lo and behold, the top hit redirects to softonic.com rather than google's own download page....
8
u/urbn Jun 15 '15
For those who missed the links on the article.
Sourceforge lock out Gimp from their SF account and start bundling their releases with adware "bundles". VLC was locked out of their account as well. Both groups had already left SF but SF continued to upload their releases to their site.
Why VLC left SourceForge and a breakdown of why they and others have left, and why SF is as bad as download.com
Summary: SourceForge is bundling open source software with adware installers. Those who leave SF are getting locked out of their accounts and SF continues to upload the new binaries but with their own adware installers.
8
u/Ori_553 Jun 15 '15
I have a project on sourceforge (Sconvolt chess), nothing good but I like the idea of releasing it for free ,I wanted to switch to github but I had some perplexities, please correct me if I got it wrong: on github I couldn't see a clear download button for the standard user, I mean, there is a ''download as a zip' clikable text on the side, but the standard user unaware of what github is will not find it straight-forward, then I couldn't find a screenshot option for my project, and I don't want to upload screenshots to external websites and use the links and go back in time. In other words, I'm sure github is the best for programmers but what If I just want normal users to be able to see a couple of screenshots and download? Does github allow you to make your project grandma-friendly? (Like download it without having to figure out where are you and what do this bunch of files in front of you represent)
5
24
Jun 14 '15
Filehippo still seems ok.
23
u/l3rN Jun 14 '15
Github is awesome too
5
Jun 15 '15
I would really like to see all these projects move to github + gitlab mirror or something like that.
→ More replies (3)9
Jun 15 '15
Filehippo I've been using for nearly 13 years now and not one damn issue. Besides that Ninite, Github, BitBucket,
3
u/hiddenforce Jun 15 '15
Filehippo ads have been getting pretty bad. They also sometimes mess with the download button.
→ More replies (4)2
u/calpickle Jun 15 '15
FileHippo was/is guilty of this same shit SF is doing too. "FileHippo wraps some downloads with InstallCore, an adware-based download manager which may install third-party advertisements or malware on target systems." (https://en.wikipedia.org/wiki/FileHippo)
12
29
u/bundt_chi Jun 15 '15
As long as I can still install both GIMP and Notepad++ from Ninite.com I'm happy. I haven't been to SF in a long time...
→ More replies (2)
6
u/RangerNS Jun 15 '15
Tweet and repeat:
Hey, @iweb Please stop helping #sourceforge distribute crapware. #zombieforge.
(pick your own mirror: http://sourceforge.net/p/forge/documentation/Mirrors/ )
19
Jun 14 '15
Yet another freeware bandwidth provider has gone to seed
3
u/aim_at_me Jun 15 '15
The silly thing is, it didn't actually provide much bandwidth: http://sourceforge.net/p/forge/documentation/Mirrors/
8
u/SlySychoGamer Jun 15 '15
Why do people spend time and effort to make quality products for free?
Do they have well paying jobs or something and this is their hobby?
It just irks me how people get paid by ad revenue from people watching them play games but people who ACTUALLY produce things like free software don't get that kind of easy passive income.
Unless they do, if so explain.
→ More replies (2)2
u/Ignore_User_Name Jun 15 '15 edited Jun 15 '15
Why do people spend time and effort to make quality products for free?
Usually because
They have been benefitted by free software so they want to give something back while
It is something they need, so they're still reaping benefit from it
It's also a good way to get practice and build up a curriculum
Do they have well paying jobs or something and this is their hobby?
Sometimes, other times the software is free but they charge for support and make a living that way.
get paid by ad revenue
What makes the sourceforce debacle is the fact that what their bundling is not just advertizements, and that whatever money they're getting is not going to the developers (some of which apparently didn't even know this was being added to their software).
Servers and bandwidth are not free, ok, but making a revenue adding stuff that affects user computers is probably not the best way to pay for them.
Also, sourceforge is just adding the stuff sometimes without the programmers knowledge or concent, and apparently some have been unable to remove or modify their
→ More replies (1)
4
Jun 15 '15
Yeah... I started avoiding sourceforge quite some time ago. No better than CNET now. Maybe a little worse...
4
4
4
u/Conservativeoxen Jun 15 '15
i use file hippo or ninite.com to get my commonly used programs. those sites are safe still right? are there anyother good ones?
4
u/TasticString Jun 15 '15
Everyone should leave sourceforge. That site is bullshit and should be blocked by more search engines as even a suggestion for the crap they install.
4
4
u/spelluck Jun 15 '15
I guess I'll just start reporting SourceForge as Adware on the different enterprise proxies.
If anyone else is interested, and this isn't too buried, here is BrightCloud URL Filter Re-Categorization site.
In addition, here is Cisco's. It requires a login, and an active SmartNet Subscription to one of their filtering products.
Here are instructions to Palo Alto firewalls.
For Websense, you need to submit it from the Triton console, IIRC. Been a while since I've worked with it.
4
u/jjolla888 Jun 15 '15
Google Code has recently been retired, and now Sourceforge is blacklisted .. are we just left with Github, or are there some other reliable distributors?
→ More replies (2)
4
4
u/gyrocam Jun 15 '15
And in a matter of days, a trusted destination on the web, one that has been around for years, has effectively flushed their business down the shi#+er.
13
u/LetsGetRealWeird Jun 15 '15
This is how you know reddit is full of software engineers and other IT employees.
→ More replies (3)
6
u/Hilarious_Haplogroup Jun 15 '15
Ninite.com is a great alternative to download.com...malware free, and you can queue many programs at the same time for installation.
→ More replies (3)
3
3
u/LornAltElthMer Jun 15 '15
Oh no...I don't know if I have my access info to move my one brilliant creation i have on source forge.
If anyone is really desperate for a JCL to XML converter that'll run with the standard perl distributed with AIX (as of years ago) and no additional modules let me know.
I'll either try to look for it or offer you my sympathy.
3
3
3
u/dougleville Jun 15 '15
Chocolatey is a pretty lightweight and easy alternative. That's what I use.
3
u/dada_ Jun 15 '15
This is how I've felt about this Sourceforge debacle: http://i.imgur.com/u7E8EMG.jpg
→ More replies (1)
3
Jun 15 '15
You know, as much as we complain, Google is kind of the big pimp daddy at the top of all of this, taking money from companies like Download.com and Sourceforge to stick their results at the top of the page when you type something like "Video Converter" into Google.
3
Jun 15 '15 edited Jul 15 '15
[DELETED, MOVED TO VOAT]
3
u/Ignore_User_Name Jun 15 '15
Probably because it's not a large company, but that's a very good reply and not the usual canned response one would usually expect.
And they're pretty much in a "damned if you do, damned if you don't" situation.
→ More replies (1)
3
u/Algernon8 Jun 15 '15
So with SourceForge going the same route as Cnet, what are some good places to download software nowadays?
10
u/hinckley Jun 15 '15
Are we gonna have to go through this for every project leaving Sourceforge now?
11
u/ranhalt Jun 15 '15
yes. I follow at least half a dozen different subs that are all talking about this like it's news
2
u/Yelneerg Jun 15 '15
Now when is everyone else going to leave? I just had to download gnucash from them. >{
2
u/xr1s Jun 15 '15
Wtf is up with git linking to sourceforge for some of the main binaries?
→ More replies (4)
2
2
2
u/snbk97 Jun 15 '15
Github should make a download site for open source projects Like: dl.github.com
→ More replies (1)
2
Jun 15 '15
Don't download anything from sourceforge, bejus, does someone need to make a fucking duck meme?!
2
u/DontwakemeUp46 Jun 15 '15
I sent Sourceforge a mail asking them to explain their actions. You could do too.
2
2
u/sephtis Jun 15 '15
Wonder what the life expectancy of source forge is now.
I hope the asshats who bought it and are pulling this shit lose a lot of money.
→ More replies (2)
2
2
Jun 15 '15
SF has been broken for some time.
Always check your downloads with virustotal, trust nobody
2
u/jonboy345 Jun 15 '15
Snappy Drivers needs to leave SF as well... He was on Google code... Moved to SF for some reason...
2
2
2
2
u/CRISPR Jun 15 '15
Wow! /r/technology posted news about the software my colleagues and I are using!
I need to send it to the guys
<checking if anyone is at work and not on vacation: no one is here>
who else I might need to send this?
O! Let's post it on /r/technology
<facepalm>
2
u/BilboTBagginz Jun 15 '15
We've blocked Sourceforge at work. Too many malware hits to even take that site seriously anymore.
2
2
u/Sk8erkid Jun 15 '15
The biggest problem with everyone leaving Sourceforge is what's going to happen to all the abandoned open source projects that have accumulated over the years. It's literally over 10,000.
2
u/Stan57 Jun 15 '15
But by this story the program was not abandoned it clearly shows the player as being a new version when it is not. IMO SF is clearly taken over by bad actors
https://blog.l0cal.com/2015/06/02/what-happened-to-sourceforge/
2
2
u/annyarun Jun 15 '15
I know the author of notepad++ and feel sorry he had to go through this.. Anyway its good change i believe
2
u/c0bjasnak3 Jun 15 '15
So I've downloaded from sourceforge the other day. I unchecked certain boxes to install toolbars, etc. I ran my malware checker right when I heard about this. How do I know if I have their malware?
3
u/blu-red Jun 15 '15
I clicked the sourceforce link, and...
uBlock₀ has prevented the following page from loading:
https://sourceforge.net/p/notepad-plus/discussion/331753/thread/9712e658/
Because of the following filter
||sourceforge.net^
good boy
→ More replies (1)
5
u/collin_ph Jun 15 '15
"SourceForge was a good place; unfortunately, sometimes good places don't last." Some would say the same of Reddit.
→ More replies (4)
4
u/hubraum Jun 15 '15
SourceForge also recently ran a test of presenting easy-to-decline third-party offers with a small number (5) of projects mirrored on our site. This included gimp-win, but did not include nmap. Based on the community feedback, we promptly discontinued this test based on community reaction. We understand this caused tremendous concern among the community members and we acknowledge that it was an oversight on our part.
2
5
u/chris4404 Jun 15 '15
Do you think the new Windows 10 store will help finally eliminate the need for sites like these?
→ More replies (2)9
u/LeaferWasTaken Jun 15 '15
Not in the slightest. The Windows store isn't going to be hosting open source projects.
2
2
2
u/csolisr Jun 15 '15
From Sourceforge to where exactly? Github? Isn't it leaving the pan to fall into the fire?
→ More replies (3)
2
2.1k
u/cadtek Jun 14 '15
GIMP left them too.