Trojan found in Filezilla downloaded from SourceForge • Hacker News Board

Re: Trojan found in Filezilla downloaded from SourceForge

#191

Post by kuschku » Thu, Dec 03, 2015, 8:27 PM UTC

Someone1234 wrote: post #190

kuschku wrote: post #153

Earlier quoted context omitted.

Eh, yes, it is. On the Windows 7 Home Basic and Home Premium edition, it’s not pre-installed, and you have to go to System Settings -> Programs and Features -> Install or Remove Features to install it.

I have Windows 7 Home Premium on my Mac via Parallels, and just I just typed in "ftp" into cmd and it came straight up. The only packages I have installed are "Media Features" ".Net Framework 3.5.1" "Print and Document Services" "Windows Gadget Platform" "Windows Search" and XPS Services/Viewer. All of which are default features. Which package are you even suggesting contains the ftp.exe client? Because I don't even…

They used to put all that stuff – ftp, network utilities, etc in one package.

Granted, I haven’t used Windows in 4 years, but I remember fighting with getting ftp on Windows without admin.

Re: Trojan found in Filezilla downloaded from SourceForge

#192

Post by feld » Thu, Dec 03, 2015, 8:30 PM UTC

rsync wrote: post #157

scrollaway wrote: post #8

Something came up last time Sourceforge was discussed here, namely "why are projects still using it?"... I'm the project lead for LXQt ( http://lxqt.org ). We inherited some infrastructure legacy from LXDE, which was hosted on sourceforge. Today, we have moved most of the legacy to Github but we're still using Sourceforge's mailing list system. We're moving to a self-hosted mailman3 instance but it's been excruciatin…

"So I'm pitching this to bored devs and entrepreneurs: Help us, and many other projects, by creating a "Github for mailing lists" with a web client featuring a clean high quality UI, easily browsable/linkable archives, etc. Make it open source, make it self-hostable, stuff in enterprise support. Make it quick and easy to create new lists." Uggh ... really ? So the simple, clean, extremely fast loading HTML indexes of…

and if you want a better UI, wait until someone upgrades it to Mailman 3 I guess?

Re: Trojan found in Filezilla downloaded from SourceForge

#193

Post by Someone1234 » Thu, Dec 03, 2015, 8:39 PM UTC

kuschku wrote: post #191

Someone1234 wrote: post #190

Earlier quoted context omitted.

I have Windows 7 Home Premium on my Mac via Parallels, and just I just typed in "ftp" into cmd and it came straight up. The only packages I have installed are "Media Features" ".Net Framework 3.5.1" "Print and Document Services" "Windows Gadget Platform" "Windows Search" and XPS Services/Viewer. All of which are default features. Which package are you even suggesting contains the ftp.exe client? Because I don't even…

They used to put all that stuff – ftp, network utilities, etc in one package. Granted, I haven’t used Windows in 4 years, but I remember fighting with getting ftp on Windows without admin.

Are you sure you aren't mis-remembering and were installing the Unix Services for Windows, to utilise Linux-like command line utilities?

As the person said above, ftp.exe has been in Windows since the MS Dos days, and is a core utility. I've never seen it not been available on any version in any situation.

Now an FTP server definitely needs to be installed. Always has. But we're talking about the ftp.exe client.

Re: Trojan found in Filezilla downloaded from SourceForge

#194

Post by jnbiche » Thu, Dec 03, 2015, 8:45 PM UTC

scient wrote: post #126

jnbiche wrote: post #114

Earlier quoted context omitted.

The cool thing about D's forums/feed is how amazingly fast they are. I wish more web apps were designed like this, with a fast backend framework. Instead, it's all either slow, slow backend frameworks like Ruby, or even worse, these SPA applications that require extensive client-side JS processing before they show you the goods. Node is a step in the right direction for both problems: for the first, Node-based backen…

I don't think you know what you are talking about sadly.

Do tell, please.

Re: Trojan found in Filezilla downloaded from SourceForge

#195

Post by amyjess » Thu, Dec 03, 2015, 8:46 PM UTC

Relys wrote: post #187

amyjess wrote: post #171

Earlier quoted context omitted.

Simple bundling is not a GPL violation, only linking.

Is there any license that prohibits this then? If not, should one be created?

If there was, it wouldn't be open source. The Open Source Definition explicitly prohibits any license that restricts simple bundling [0]:

> The license shall not restrict any party from selling or giving away the software as a component of an aggregate software distribution containing programs from several different sources.

Same with the Debian Free Software Guidelines [1]:

> The license of a Debian component may not restrict any party from selling or giving away the software as a component of an aggregate software distribution containing programs from several different sources.

[0] https://opensource.org/osd-annotated

[1] http://www.debian.org/social_contract#guidelines

Re: Trojan found in Filezilla downloaded from SourceForge

#196

Post by CM30 » Thu, Dec 03, 2015, 8:57 PM UTC

So SourceForge has gone from terrible to (somehow) even worse than that.

It makes me wonder; why don't we have a good site for Windows programs yet?

Ideally, it'd be run by volunteers (not a company with a profit motive), would manually moderate the programs posted them (and remove any adware/spyware/bundled programs by force if necessary) and tell every malware ridden sleazy ad network to sod off.

It exists in more niche subject areas. If I look for game making resources, a lot of those sites actually do proper moderation and try and make sure viruses aren't present in uploads. Places like MFGG are pretty good about this. So why don't we have that for software in general?

I mean, there's GitHub and package managers, but it's disappointing how this market has no honest people in it.

Re: Trojan found in Filezilla downloaded from SourceForge

#197

Post by pmlnr » Thu, Dec 03, 2015, 9:01 PM UTC

Chlorus wrote: post #175

electroly wrote: post #134

Earlier quoted context omitted.

>If you're managing 5+ projects at once, your inbox must be a train-wreck of garbage from these mailing lists. This is a total non-issue. Mailing lists support daily digests if you want that, and email clients support folders and filters if you want that instead. Nobody managing 5+ mailing list-based projects at once is dumping all of that into an unsorted inbox.

> and email clients support folders and filters if you want that instead. Because who doesn't like mucking around with their client's filtering?

Ever heard of Sieve? ;)

Re: Trojan found in Filezilla downloaded from SourceForge

#198

Post by abcd_f » Thu, Dec 03, 2015, 9:24 PM UTC

UnoriginalGuy wrote: post #117

abcd_f wrote: post #43

Earlier quoted context omitted.

It doesn't come standard, not on all Windows flavours. It's a part of "Core networking utilities" package that used to have some really odd dependencies.

You're mis-remembering or something... There's no such thing as a "Core Networking Utilities" package on Windows (never has been) and ftp has been a command line tool since at least Windows 95. I don't particularly like the built in FTP command line utility (even with scripts). But it has existed a very long time indeed.

Damn, I think you are right. Just checked on W7 and it must've been telnet and/or tftp that I was thinking about. ftp does seem to come standard.

Re: Trojan found in Filezilla downloaded from SourceForge

#199

Post by z3t4 » Thu, Dec 03, 2015, 9:48 PM UTC

jnbiche wrote: post #114

IshKebab wrote: post #79

Earlier quoted context omitted.

D has the best mailing list interface in the world by an enormous margin . http://forum.dlang.org/ (The forum is a front-end to the mailing lists / newsgroups.)

The cool thing about D's forums/feed is how amazingly fast they are. I wish more web apps were designed like this, with a fast backend framework. Instead, it's all either slow, slow backend frameworks like Ruby, or even worse, these SPA applications that require extensive client-side JS processing before they show you the goods. Node is a step in the right direction for both problems: for the first, Node-based backen…

To be fair, the content of that forum could probably fit inside the RAM. And it's not doing anything fancy like sorting, etc.

Re: Trojan found in Filezilla downloaded from SourceForge

#200

Post by pix64 » Thu, Dec 03, 2015, 10:23 PM UTC

kuschku wrote: post #191

Someone1234 wrote: post #190

Earlier quoted context omitted.

I have Windows 7 Home Premium on my Mac via Parallels, and just I just typed in "ftp" into cmd and it came straight up. The only packages I have installed are "Media Features" ".Net Framework 3.5.1" "Print and Document Services" "Windows Gadget Platform" "Windows Search" and XPS Services/Viewer. All of which are default features. Which package are you even suggesting contains the ftp.exe client? Because I don't even…

They used to put all that stuff – ftp, network utilities, etc in one package. Granted, I haven’t used Windows in 4 years, but I remember fighting with getting ftp on Windows without admin.

Windows no longer installs telnet.exe by default anymore