Older thread about Sourceforge: https://news.ycombinator.com/item?id=9623142
Just don't use them.
Trojan found in Filezilla downloaded from SourceForge
11–20 of 217 posts
Re: Trojan found in Filezilla downloaded from SourceForge
#12No way I'm supporting this kind of behavior. Can you suggest an alternative to FileZilla ?
The problem is not FileZilla, but SourceForge. They do this to all their files.
Re: Trojan found in Filezilla downloaded from SourceForge
#13No way I'm supporting this kind of behavior. Can you suggest an alternative to FileZilla ?
The problem is not FileZilla, but SourceForge. They do this to all their files.
That's not quite accurate... FileZilla has opted into the bundle-with-crapware program [1] to make some money.
Re: Trojan found in Filezilla downloaded from SourceForge
#14Something came up last time Sourceforge was discussed here, namely "why are projects still using it?"... I'm the project lead for LXQt ( http://lxqt.org ). We inherited some infrastructure legacy from LXDE, which was hosted on sourceforge. Today, we have moved most of the legacy to Github but we're still using Sourceforge's mailing list system. We're moving to a self-hosted mailman3 instance but it's been excruciatin…
Does http://librelist.com/ match your requirements?
"It is a place for FOSS communities to discuss all the things they want without ads, censorship, signup requirements, bundled apps, or requirements that you use any particular email client or service."
Re: Trojan found in Filezilla downloaded from SourceForge
#15No way I'm supporting this kind of behavior. Can you suggest an alternative to FileZilla ?
The problem is not FileZilla, but SourceForge. They do this to all their files.
SourceForge are adding the malware but the FileZilla people are acting as if it's not a problem and refusing to help people / accept that there is an actual virus in the executable they link on their site.
"It's not our problem, it's SourceForge" - stop f'ing using SourceForge then!
Their ambivalence and complicity in distributing this malware is probably the behaviour GP was talking about.
Re: Trojan found in Filezilla downloaded from SourceForge
#16It's done intentionally to make the owners a bit of money. They have direct download links on their website (click show all on download page), avoid the green Sourceforge link.
Nope, all links direct to Sourceforge.
Re: Trojan found in Filezilla downloaded from SourceForge
#17No way I'm supporting this kind of behavior. Can you suggest an alternative to FileZilla ?
The problem is not FileZilla, but SourceForge. They do this to all their files.
The problem is that Google still rank SourceForge highly.
If Google ranked them down, then they harm would be limited.
Re: Trojan found in Filezilla downloaded from SourceForge
#18No way I'm supporting this kind of behavior. Can you suggest an alternative to FileZilla ?
you can install Filezilla from Ninite. https://ninite.com/
Well - you are trusting that Ninite doesn't include any crapware / malware, but until now I didn't had any problems with it. Makes updating Java Runtime much nicer too.
Re: Trojan found in Filezilla downloaded from SourceForge
#19No way I'm supporting this kind of behavior. Can you suggest an alternative to FileZilla ?
FlashFXP - been using it since 1999, still love it
Re: Trojan found in Filezilla downloaded from SourceForge
#20Something came up last time Sourceforge was discussed here, namely "why are projects still using it?"... I'm the project lead for LXQt ( http://lxqt.org ). We inherited some infrastructure legacy from LXDE, which was hosted on sourceforge. Today, we have moved most of the legacy to Github but we're still using Sourceforge's mailing list system. We're moving to a self-hosted mailman3 instance but it's been excruciatin…
Isn't this what Google Groups is used for? (what's different / lacking there? I'm of the age where I remember SourceForge as somewhere I would sometimes download things from as a young teenager but nothing more than that)