Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Sourceforge Hijacks the Nmap Sourceforge Account

seclists.org

Post reply on HN
Print view View original

181–190 of 201 posts

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#181

Post by swhipple »

leojfc wrote: post #61
corobo wrote: post #32

Earlier quoted context omitted.

The problem isn't really in the overall bandwidth usage though, it's the concurrency. Would the $5/month droplet stand up to a surge of people coming in for a latest release, or a bit of press coverage? Would there be enough bandwidth that everyone gets the file fast or would they all slow to a crawl

What about providing a BitTorrent link? The main server could provide a backstop seed, and presumably enough other people would seed too for any decent-sized project.

P2P downloads would help cover some of the costs, but popular projects probably need a direct download link with load balancing as well.

If the project doesn't want to manage their own infrastructure, they're probably going to want a CDN or object storage provider. The most cost-friendly I've seen is OVH's RunAbove object storage, but I'd be interested to know if there is anything else comparable.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#182

Post by DaFranker »

dec0dedab0de wrote: post #153
DaFranker wrote: post #114

Earlier quoted context omitted.

Whoa what. Are you suggesting that suspicion of possibly maybe having put a trojan in someone else's files somewhere is grounds to make all one's efforts useless and poisons everything else you do? Geeze, I guess we should stop using Google. They've been accused and suspected of much worse by a lot of people. I hope that's not what you meant.

suspicion of possibly maybe having put a trojan in someone else's files Isn't it a hard fact at this point?

For Sourceforge specifically? Sure.

In general, the way the comment was worded? No, suspicion does not equal hard fact.

We were talking about the latter.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#183

Post by maxst »

dagw wrote: post #67
mverwijs wrote: post #52

The BOFH in me is more upset with the software projects that abandonded those accounts without properly closing them.

The problem is that it is basically impossible to completely close and remove a software project from Sourceforge. The best you can do is tag it as "inactive" or "relocated" and provide a link to the new site, but the project site will still exist.

Let's say it becomes possible. Then what? If your project is popular, it would be on softpedia, filehippo, majorgeeks and many other "free software" aggregators. If your project license allows others to distribute your software, you can't stop them.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#184

Post by e12e »

oldmanjay wrote: post #176
hollerith wrote: post #141

Earlier quoted context omitted.

>Everything internet sucked around 2000. Search engines where either semi-curated listing or covered a fraction of what was a much smaller internet. I disagree, and in fact preferred the internet of 2000 to the internet of 2015. Google search worked fine in 2000: although SEO existed in 2000, it was much less refined and extensive than in 2015. The main problem in search results today is that profit-motivated content…

Here's a good rule of thumb to keep in mind: Any time you have a "theory" about other people that implies that you have a natural superiority to them based on your belief that you have superior taste, you're almost certainly full of yourself

I wonder if this comment might not be an example of the point it is trying to make?

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#185

Post by Nelson69 »

pjc50 wrote: post #106
bad_user wrote: post #104

Earlier quoted context omitted.

Not sure how profitable GitHub is, but there are users paying for private repositories or for the Enterprise version and the revenues thus far seem to be enough to support the free users as well and to an outsider like me being a win-win situation, since GitHub is now the place to be on, with open-source projects giving them free exposure, with the Enterprise version starting to win against other established solution…

Github are indeed the heroes of the day and have an enterprise revenue model. So far, so good. But Sourceforge is sixteen years old. Will Github still be the good guys in 2030? It's impossible to know.

SF/VA gave Linus and ESR stock. I believe ESR and several others were on some sort of community advisory committee to them. Part of SF's problem was that they didn't want to pick winners so much as create and facilitate "community" they had multiple choices for different tools they hosted. They had build servers and such as that seemed at the time like problem space (how do you know if your code runs on Itanium?) They made, what at the time was, an unprecedented effort to engage community and not be evil.

Ultimately someone needs to pay some bills though, a few transactions later and this seems remarkably far from their start. It's embarrassing and shocking.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#187

Post by oldmanjay »

hollerith wrote: post #178
oldmanjay wrote: post #176

Earlier quoted context omitted.

Here's a good rule of thumb to keep in mind: Any time you have a "theory" about other people that implies that you have a natural superiority to them based on your belief that you have superior taste, you're almost certainly full of yourself

I can usually stay engaged and interested in static documents consisting of black text on a white background for many hours in a row. Some of the people in my life need more mental stimulation than that can provide, and spontaneously tell me as much. (Their main source of mental stimulation is social interaction.) What part of that or my other comment implies that I think I have superior taste?

Your entire comment is a statement that the web of 2K-ish was superior, and that it is also to your taste, so there's the implication.

Also, in truth, I'm just tired of the "everything new is shitty, everything old is grand" comments on nerd sites, so I call them out habitually.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#188

Post by mindslight »

hollerith wrote: post #141
gutnor wrote: post #127

Earlier quoted context omitted.

People remember Sourceforge fondly because the service they offered, for the time, was good. Everything internet sucked around 2000. Search engines where either semi-curated listing or covered a fraction of what was a much smaller internet. Free hosting was a joke, affordable paid hosting was not much better. Your bandwidth at home was not good and anyway your computer was not the powerhouse it is today - you needed…

>Everything internet sucked around 2000. Search engines where either semi-curated listing or covered a fraction of what was a much smaller internet. I disagree, and in fact preferred the internet of 2000 to the internet of 2015. Google search worked fine in 2000: although SEO existed in 2000, it was much less refined and extensive than in 2015. The main problem in search results today is that profit-motivated content…

Wholly agree on the state of searching. These days pretty much any important words in my technical queries are ignored, and the results end up with the same landing pages for the project I'm searching about mixed in with pop culture trash and autogenerated spam pages rather than anything relevant to the narrower query. It's not a library of knowledge, but a wall of noise.

I've tried eg Yandex and it's not much better, mostly just different (although they do return a good amount of results for things that Google's thought police have vanished). The unfortunate truth is that with the "internet" entering pop culture, pop culture has watered down the Internet.

I was thinking it would be interesting experiment to take adblock one step further and hack something up that retrieved all the Google results and filtered out everything with any advertising. It seems like I'd come across those hard-wrought dense-knowledge textual pages far quicker, since the author's motivation is to share knowledge.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#189

Post by mrdatawolf »

hollerith wrote: post #178
oldmanjay wrote: post #176

Earlier quoted context omitted.

Here's a good rule of thumb to keep in mind: Any time you have a "theory" about other people that implies that you have a natural superiority to them based on your belief that you have superior taste, you're almost certainly full of yourself

I can usually stay engaged and interested in static documents consisting of black text on a white background for many hours in a row. Some of the people in my life need more mental stimulation than that can provide, and spontaneously tell me as much. (Their main source of mental stimulation is social interaction.) What part of that or my other comment implies that I think I have superior taste?

Well "...need more..." implies you are superior because you don't. As well as "... and spontaneously tell me as much." which implies they give you facts you didn't ask for and coupled with the rest of the comment implies you had no interest in knowing i.e. are time wasters.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#190

Post by jackmaney »

maxst wrote: post #161
jackmaney wrote: post #147

Earlier quoted context omitted.

Because perhaps--just fucking perhaps--you don't want malware injected into any of your projects when they're downloaded?

I keep complete control over my projects, and I'll make sure it won't happen.

> I keep complete control over my projects

Until they take that control from you.

> I'll make sure it won't happen

How?

Post reply on HN