This has been known about for some time. The Filezilla guys know about it. http://sourceforge.net/blog/devshare-relaunch-power-to-end-u...
Shouldn't this be a criminal offense?
Trojan found in Filezilla downloaded from SourceForge
31–40 of 217 posts
Re: Trojan found in Filezilla downloaded from SourceForge
#32SourceForge and Filezilla are both on their way out, hence their owners desire to monetize their remaining users while they still can. WinSCP is a decent alternative. As is Swish: http://www.swish-sftp.org/ https://github.com/alamaison/swish
On Windows, you don't always need a 3rd party FTP program. Windows Explorer (not IE) already does FTP. Just open any folder and type ftp://example.com into the path bar.
Or you type 'ftp' in the command line.
Re: Trojan found in Filezilla downloaded from SourceForge
#33Something came up last time Sourceforge was discussed here, namely "why are projects still using it?"... I'm the project lead for LXQt ( http://lxqt.org ). We inherited some infrastructure legacy from LXDE, which was hosted on sourceforge. Today, we have moved most of the legacy to Github but we're still using Sourceforge's mailing list system. We're moving to a self-hosted mailman3 instance but it's been excruciatin…
Why mailing lists are still quite massively popular in 2015?..
You can look at it this way: They're doing something that people want and which cannot be achieved through other means. What alternatives do you suggest?
(Personally, I use GMANE+NNTP for mailing lists, and NNTP is probably better than plain (public!) mailing lists for most purposes, but unfortunately that ship has sailed.)
Re: Trojan found in Filezilla downloaded from SourceForge
#34Earlier quoted context omitted.
Yes, Google Groups is very close to what's needed - unfortunately, it's proprietary and Google doesn't really maintain it, it's only a matter of time it goes the way of Reader.
FWIW, Google Groups powers email distribution lists for Gmail for Work. Or at least, the two are strongly linked. At this point, unlike Reader, there's real cash behind the functionality. It's possible they could just fold it into Gmail, I guess, but with other mail interfaces like Inbox popping up in the Google ecosystem it seems if anything they're trying not to shoehorn too much more into a flagship product. My gu…
That's interesting, but it doesn't reassure me much. The infrastructure behind Groups may be in use, it doesn't stop Google from shutting the UI down.
Re: Trojan found in Filezilla downloaded from SourceForge
#35Earlier quoted context omitted.
Why mailing lists are still quite massively popular in 2015?..
How would you replace them? ( Please don't say Slack. That is just _not_ a good replacement, especially for projects that needs publicly searchable archives. ) IMHO a publicly/semi-publicly logged irc channel would do just as well, but that's even more oldschool.
The alternative is pretty much only online forums. Which imo. doesn't offer a lot of advantages, and most forum software is exceptionally bad (though yes, a few new and nicer ones
are coming along)
Re: Trojan found in Filezilla downloaded from SourceForge
#36> If someone really wanted to download FileZilla and skip the malware do just that.
> Then after installation is complete install Malware bytes and Avira. Scan with both and restart the computer.
> Then run with ADWcleaner and and remove the infections and restart. should be good from there and enjoy FileZilla.
Do people really think this works? I mean, there's no-one on HN who thinks this works, right?
Re: Trojan found in Filezilla downloaded from SourceForge
#37you can get a clean version from fosshub
Re: Trojan found in Filezilla downloaded from SourceForge
#38As far as the password storage goes, you are not up-to-date. They are stored base64-encoded now. Yes, much better.
Was about to post the same thing. If this crap is posted by a contributer I'm moving away from it as fast as possible.
Re: Trojan found in Filezilla downloaded from SourceForge
#39Something came up last time Sourceforge was discussed here, namely "why are projects still using it?"... I'm the project lead for LXQt ( http://lxqt.org ). We inherited some infrastructure legacy from LXDE, which was hosted on sourceforge. Today, we have moved most of the legacy to Github but we're still using Sourceforge's mailing list system. We're moving to a self-hosted mailman3 instance but it's been excruciatin…
I've always found the Sourceforge mailing list archive interface to be one of the worst out there. Sure, it's a lot prettier than the raw, unstyled HTML of the Mailman default but it's just not nearly as usable.
Re: Trojan found in Filezilla downloaded from SourceForge
#40As far as the password storage goes, you are not up-to-date. They are stored base64-encoded now. Yes, much better.
FTP passwords can't be hashed. The right solution would be to support platform keyrings but ... https://trac.filezilla-project.org/ticket/1373
Someone explained that after he got some malware on his computer and subsequently all his websites were hacked. The response?
Once you've got malware on your computer, you've lost already, game over. You need to prevent the infection in the first place.
OMFG...