Live data from Hacker News

Sourceforge Hijacks the Nmap Sourceforge Account

seclists.org

11–20 of 201 posts

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#11
If you didn't know sourceforge have back-pedalled 2 days ago and said they'll stop bundling the crapware in the mirrored projects:

http://sourceforge.net/blog/third-party-offers-will-be-prese...

The author, and a lot of the commentators here, don't seem to have seen that announcement.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#12
If your old account is listed here, you getting fuxxored:

http://sourceforge.net/u/sf-editor1/profile/

http://sourceforge.net/u/sf-editor2/profile/

http://sourceforge.net/u/sf-editor3/profile/

Edit: added http://sourceforge.net/u/sf-editor/profile/ which includes MySQL and a few other high profile projects.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#14
This is the sort of behavior you get from a company that's lost, and is now trying to extract every penny they can from whatever shenanigans they can get away with.

If they have no future brand value to be concerned about, then, from a game-theoretic approach, it's actually a pretty rational profit seeking move. (As long as they don't incur any downstream liabilities from outright illegal activity for which they might be fined, or successfully sued - if there is any entity left to sue)

Of course, the game-theoretic response from the entire internet community is to make sure they never, ever, for any reasons whatsoever, ever click on a link that starts with "sourceforge.net"

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#15

If you didn't know sourceforge have back-pedalled 2 days ago and said they'll stop bundling the crapware in the mirrored projects: http://sourceforge.net/blog/third-party-offers-will-be-prese... The author, and a lot of the commentators here, don't seem to have seen that announcement.

Then why are those hundres of mirror accounts still online? There is simply no excuse for that.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#16

If you didn't know sourceforge have back-pedalled 2 days ago and said they'll stop bundling the crapware in the mirrored projects: http://sourceforge.net/blog/third-party-offers-will-be-prese... The author, and a lot of the commentators here, don't seem to have seen that announcement.

You probably missed this part at the end:

PPS: Sourceforge now claims they will stop trojaning software without the developer's permission, but they've broken that exact promise before.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#17

If you didn't know sourceforge have back-pedalled 2 days ago and said they'll stop bundling the crapware in the mirrored projects: http://sourceforge.net/blog/third-party-offers-will-be-prese... The author, and a lot of the commentators here, don't seem to have seen that announcement.

They've probably seen it, just given it no credence

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#18

This is the sort of behavior you get from a company that's lost, and is now trying to extract every penny they can from whatever shenanigans they can get away with. If they have no future brand value to be concerned about, then, from a game-theoretic approach, it's actually a pretty rational profit seeking move. (As long as they don't incur any downstream liabilities from outright illegal activity for which they migh…

Simply add their domain to the hosts file to prevent any accidental downloading.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#19

So what decent release tarball storage services are there today if github's autogenerated release tarballs don't do it for you?

Given that a VPS like Digital Ocean will give you 1 Terabyte/month for $5/month, isn't it straightforward to hose your own tarball now?

I see the nmap tarball is 20 Megabytes = 50,000 downloads.

The cost of hosting should be easily covered by your user base.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#20

If your old account is listed here, you getting fuxxored: http://sourceforge.net/u/sf-editor1/profile/ http://sourceforge.net/u/sf-editor2/profile/ http://sourceforge.net/u/sf-editor3/profile/ Edit: added http://sourceforge.net/u/sf-editor/profile/ which includes MySQL and a few other high profile projects.

Plenty popular names on there. That's shocking.
Post reply on HN