Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Sourceforge Hijacks the Nmap Sourceforge Account

seclists.org

Post reply on HN
Print view View original

41–50 of 201 posts

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#41

Post by embik »

DanBC wrote: post #24
DanBC wrote: post #6

I'm surprised the nmap.mirror site doesn't have hundreds of reviews telling people to not use it, and pointing them to the official site. I'd be interested to see how sourceforge respond to DMCA requests.

MOZILLA: http://sourceforge.net/projects/firefox points to "personal builds of Firefox"; http://sourceforge.net/projects/firefox.mirror/ seems to describe legit Firefox. I haven't tried to download it to see what I get. FEDORA: http://sourceforge.net/projects/fedora/ points to some random software. http://sourceforge.net/projects/fedora.mirror describes Fedora the OS. Not only scummy, but semi-competant too.

278 downloads for Fedora 17 32bit this week? Those poor souls trying to get into Linux ...

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#43

Post by pjc50 »

ghshephard wrote: post #14

This is the sort of behavior you get from a company that's lost, and is now trying to extract every penny they can from whatever shenanigans they can get away with. If they have no future brand value to be concerned about, then, from a game-theoretic approach, it's actually a pretty rational profit seeking move. (As long as they don't incur any downstream liabilities from outright illegal activity for which they migh…

You either go bankrupt as a hero or live long enough to become the monetisation villain.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#44

Post by [deleted] »

embik wrote: post #41
DanBC wrote: post #24

Earlier quoted context omitted.

MOZILLA: http://sourceforge.net/projects/firefox points to "personal builds of Firefox"; http://sourceforge.net/projects/firefox.mirror/ seems to describe legit Firefox. I haven't tried to download it to see what I get. FEDORA: http://sourceforge.net/projects/fedora/ points to some random software. http://sourceforge.net/projects/fedora.mirror describes Fedora the OS. Not only scummy, but semi-competant too.

278 downloads for Fedora 17 32bit this week? Those poor souls trying to get into Linux ...

[deleted]

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#45

Post by omegafail »

smegel wrote: post #42

Sourceforge is now on my personal blocklist for Google search results. Along with expertsexchange which I added years ago, and Quora which may surprise some.

Even Quora? :-)

I think they removed the logged-in requirement. At least I have been able to see every answer even though I never registered.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#46

Post by pjc50 »

ghshephard wrote: post #19
nononononono wrote: post #13

So what decent release tarball storage services are there today if github's autogenerated release tarballs don't do it for you?

Given that a VPS like Digital Ocean will give you 1 Terabyte/month for $5/month, isn't it straightforward to hose your own tarball now? I see the nmap tarball is 20 Megabytes = 50,000 downloads. The cost of hosting should be easily covered by your user base.

Do users pay anything at all? Or enough to cover that trivial cost?

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#47

Post by dagw »

vaceletm wrote: post #34

The only viable long term way for any open source project is to selfhost[1] [1] https://www.enalean.com/en/Open-source-community-host-yourse...

What sort of traffic do reasonably popular open source projects see? And what sort of costs would be involved for self hosting?

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#48

Post by antihero »

ghshephard wrote: post #19
nononononono wrote: post #13

So what decent release tarball storage services are there today if github's autogenerated release tarballs don't do it for you?

Given that a VPS like Digital Ocean will give you 1 Terabyte/month for $5/month, isn't it straightforward to hose your own tarball now? I see the nmap tarball is 20 Megabytes = 50,000 downloads. The cost of hosting should be easily covered by your user base.

Oh bollocks, I thought by 1TB/month you meant in storage, not bandwidth!

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#49

Post by vaceletm »

dagw wrote: post #47
vaceletm wrote: post #34

The only viable long term way for any open source project is to selfhost[1] [1] https://www.enalean.com/en/Open-source-community-host-yourse...

What sort of traffic do reasonably popular open source projects see? And what sort of costs would be involved for self hosting?

I think the point here is "reasonably popular", which project would you place here ?

The costs are directly proportional to the traffic but nowadays most "reasonable popular" open source projects can get hardware (VMs) from hosting companies for free.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#50

Post by danieltillett »

smegel wrote: post #42

Sourceforge is now on my personal blocklist for Google search results. Along with expertsexchange which I added years ago, and Quora which may surprise some.

What is wrong with Quora. You may not like their business model, but I don't think they are doing anything terrible like source forge.
Post reply on HN