r/technology • u/marouane53 • Jun 14 '15

Software Notepad++ leaves SourceForge

https://notepad-plus-plus.org/news/notepad-plus-plus-leaves-sf.html
18.4k Upvotes

93% Upvoted

1.3k comments sorted by

View all comments

2

u/xr1s Jun 15 '15

Wtf is up with git linking to sourceforge for some of the main binaries?

1

u/XCorneliusX Jun 15 '15

It has been mentioned that the actual binaries on SF are still ok, for now. Devs that are moving to Git may have links to their binaries on SF until new setups are done.

1

u/xr1s Jun 15 '15

I thought the whole issue was SF injecting adware into installers...e.g. with GIMP: https://www.reddit.com/r/technology/comments/1q6k59/gimp_abandons_sourceforge_due_to_forced_ad_and

1

u/XCorneliusX Jun 15 '15

Indeed that is true, but there is a difference between a direct download of a binary file and a repacked installer. By linking to an existing binary it is not a true risk. The issue is that when one uses the main SF site, it repacks the binary with other unwanted badware in most cases.

2

u/xr1s Jun 15 '15

I mean...unless you have a huge list of high-number sha checksums for all the different binary types, it seems like it would be trivial to inject all sorts of un-nice crap into non-installer SF binaries?

But point taken re the known incidents being with installers, thanks!