Live data from Hacker News

Filezilla installer is suspicious again

forum.filezilla-project.org

201–210 of 258 posts

Re: Filezilla installer is suspicious again

#201

Earlier quoted context omitted.

> Its truly amazing to me that installing windows software is still like this It doesn't have to be that way, since there is a Windows/Microsoft Store since plenty of years now. But then you have gamers and game devs spreading FUD about UWP and the the MS Store, while they praise 3rd party platforms like Steam and GoG that actively refuse UWP apps in their store, while allowing Spyware like this. https://www.reddit.c…

The long term solution CAN'T be the MS store. It requires asking Microsoft for permission to compete with them. It gives MS permission to bar entire categories of software globally or in your particular market. Giving the party running the store 30% of all revenue is a hard sale to start with. More importantly it gives MS the position to impose whatever dictates it or even more likely every government in existence th…

I agree with you about the control aspect, but.

> On windows nothing much is on the store mostly because people don't want to give Microsoft 30% on Linux charging 30% is downright impossible because people would trivially publish an alternative source instead.

Most package managers on Linux do not provide any sort of revenue stream. The comparison only holds when the software is free, at which point '30%' is $0.

The main exception I'm aware of, the elementaryOS app center, provides a worse deal. Same 70/30 split for $2 charges, but it's 50/50 on a $1 charge.

Re: Filezilla installer is suspicious again

#202
post #12

It's sad that FileZilla remains so popular long after the creator has chosen to monetize it with adware. I highly recommend any FileZilla user reading this should switch to WinSCP. It's free, open source, and not bundled with any crapware.

winscp has also previously bundled crapware (OpenCandy) https://en.wikipedia.org/wiki/WinSCP#Advertisements_in_insta...

Now you gonna tell me lftp was also bundled with crap?

Re: Filezilla installer is suspicious again

#203
Notwithstanding the rest, being suspicious just because of VirusTotal output is paranoid. It’s a cesspool out there, most AV is total crap (and some, like Bitdefender or F-Secure, are truly something) and false positives from them is every release problem for many developers.

Re: Filezilla installer is suspicious again

#204
post #147

« The connections are for fetching offers and, if the user accepts the offer, the offered file. What the file is for is written in the offer text. The network requests to fetch offers are done only after the user has agreed to it by accepting the privacy policy. » Translation: « Our installer fetches random crapware once you click past the giant wall of text. »

This is allowed under GDPR? Doesn't this constitute breaking into computers?

Even if it did (but that’s rubish), it would have nothing to do with GDPR - which isn’t your personal magic bullet against anything you might not like.

Re: Filezilla installer is suspicious again

#205
post #65

I doubt the legal system that the publisher reside in would accept the excuse that giving control over to a third-party will protect them from liability if malware get installed from the installer. No amount of eula, disclaimer, or calling it "bundle" can do that, and now that there is a public documented discussion that the developer knowingly allowed it. That sound like some significant risk, one which I would neve…

Hmm? I don't think I've ever heard of any lawsuits about bundled adware. (Read: I doubt it's illegal.)

Re: Filezilla installer is suspicious again

#206
post #194

Earlier quoted context omitted.

> Its truly amazing to me that installing windows software is still like this It doesn't have to be that way, since there is a Windows/Microsoft Store since plenty of years now. But then you have gamers and game devs spreading FUD about UWP and the the MS Store, while they praise 3rd party platforms like Steam and GoG that actively refuse UWP apps in their store, while allowing Spyware like this. https://www.reddit.c…

This account has been using HN exclusively to promote a pro-Microsoft agenda for a long time. That's a serious abuse of this site and I've banned it. All: Agenda-driven and single-purpose accounts aren't allowed on Hacker News because they're incompatible with the intellectual curiosity this site exists for. Double that when the agenda or single purpose is advancing corporate interests. It doesn't matter what corp it…

This is a serious false accusation. Am I not allowed to prefer Windows? All I did was correct the rampant misinformation and bias against Windows that rarely gets challenged.

And do you really think someone working for Microsoft would post something like this? https://www.reddit.com/r/Surface/comments/7of68m/surface_pro...

Re: Filezilla installer is suspicious again

#207

Earlier quoted context omitted.

I'd honestly like to just see new alternatives altogether, crazy there's like no other GUI alternatives that are open source and comparable.

Cyberduck? https://cyberduck.io/ Seems like a good alternative with a modern UI.

Thanks for that, I've run into cyberduck but never was sure if it was open source or what till now.

Re: Filezilla installer is suspicious again

#208
Am I right in guessing that this affects the filezilla client only (at least on Windows)? Virustotal gives the server a clean bill of health.

It gives the client a detection score of 7/67. This raises the question for me of what's considered an acceptable detection score on virustotal.

Before this I'd have looked at a score of 7 and concluded that as the great preponderance of opinion is that this file is fine, it's fine, probably.

Re: Filezilla installer is suspicious again

#209
post #195

Earlier quoted context omitted.

If I see someone being immoral I'm going to tell them "how to make their living" not because I hope they are going to be so inspired as to change for the better because you and I both know that's not going to work. I do so because I hope other people will listen and stop doing business with them leading to a decrease in profit and THEN changed behaviour from the culprit. There is lots of factual information. They are…

Okay, but malware "like" is not actually malware. If it turns out that it is, then ofcource why would anyone support a malware distributor. >They are factually doing a lot of malware like behaviour in their installer and bundling software from questionable sources they have no control over. Their explanation was that AV vendors flag their competitors, so now in the 'arms race', competitors have resorted to downloadin…

Their explanation is obviously a lie they are getting around Antivirus software flagging it as adware.

Re: Filezilla installer is suspicious again

#210
post #166
post #103

Earlier quoted context omitted.

Hey, mine too! I actually had that, reformatted, it was fixed for a while, and it's back to doing it again. The worst part is when windows will start ignoring my request to delay updates to the weekend, and will begin restarting my computer during the week whenever I walk away from it for too long.

One of the most frustrating parts of Win10 is the update scheduling. You can request that an update be delayed, but the OS does not always honor the request as specified (settings - update & security - windows update - active hours). In Win10 Pro, you can postpone an update for max 35 days (windows update - advanced options - pause updates), but never indefinitely. If a pending update will break your machine (and you…

Are there no registry entries or system scheduler tasks that one can disable to stop the updates altogether?
Post reply on HN