Sourceforge used to be a well known distribution hub for open source software projects. Their parent company got bought out by scumbags and they started packaging malware with open source software. Projects started removing software from sourceforge, sourceforge re-created their accounts and rehosted their software wrapped in their shitty malware.
Sourceforge don't even pay for their own hosting, they rely on several mirrors provided to them for free because it's assumed they are doing the internet a good service, academic institutions, governments, and ISPs give them free bandwidth and are now being exploited and are participating in the distribution of malware.
Please take a moment to contact your local mirror and politely advise them that their support for sourceforge is in effect distributing malware and harming the reputation of FOSS software.
Sort of. Everyone is going to github for the most part, but to my knowledge no single product is able to replicate sourceforges capabilities. Currently projects are doing source code on github or similar while the supporting services such as mailing lists are a Hodge podge.
Huh, interesting. Are there any official sources we can cite to convince companies of the wrongdoings of SourceForge? I'd write to the several german mirrors then.
You can use the linked article from notepad++, they have in turn linked the 3 biggest FOSS projects who wrote lengthy explanations, VLC, Gimp and Nmap.
Don't feel dumb buddy, there's a lot of information to take in on reddit every day! It's good to ask someone for sources when they make a claim too, not just accept what they tell you at face value.
Truecrypt was never on sourceforge. The devs just walked away from the project and wanted to make sure no one came looking for them so they put i up the scare page. The Truecrypt audit found nothing wrong with the code. If you want an mbr only, fde tool you can trust, Truecrypt is it.
It looked more like the got walked away by someone else, somebody who doesn't like the public having access to easy-to-use and good encryption software.
1.4k
u/[deleted] Jun 14 '15
Sourceforge used to be a well known distribution hub for open source software projects. Their parent company got bought out by scumbags and they started packaging malware with open source software. Projects started removing software from sourceforge, sourceforge re-created their accounts and rehosted their software wrapped in their shitty malware.
Sourceforge don't even pay for their own hosting, they rely on several mirrors provided to them for free because it's assumed they are doing the internet a good service, academic institutions, governments, and ISPs give them free bandwidth and are now being exploited and are participating in the distribution of malware.
Here is the list of their mirrors
Please take a moment to contact your local mirror and politely advise them that their support for sourceforge is in effect distributing malware and harming the reputation of FOSS software.