Live data from Hacker News

Filezilla installer is suspicious again

forum.filezilla-project.org

221–230 of 258 posts

Re: Filezilla installer is suspicious again

#221
post #17
post #4

Earlier quoted context omitted.

If your software installer bundles crapware for any reason then you've completely lost the plot and nobody should trust your software ever again.

There is pretty much no freeware download site that doesn't bundle crapware. I guess all freeware is untrustworthy by your logic. https://www.howtogeek.com/207692/yes-every-freeware-download...

PortableApps (https://portableapps.com) seems pretty good. :)

Re: Filezilla installer is suspicious again

#222
post #129

Earlier quoted context omitted.

> The common reason why people tend to stick to Windows is games For home users perhaps. Enterprise users are often locked into ERP clients, for instance, that are Windows only. But the real killer reason enterprises use Windows is Active Directory. Simple GUI SSO and policy based management. For instance I could have a white-list that didn't have this adware on it and could apply it by group-policy...

Active Directory is just a fancy name for LDAP, Kerberos, and DNS (often in combination with CIFS). There's no reason why you cannot use an equiv in a partly or pure Linux/UNIX environment. And indeed, there are many partly Linux/UNIX environments where the servers are running on Linux/UNIX yet the clients are running on Windows. The killer feature of Windows is that people are used to running it as desktop, meaning…

Except AD lets you do an awful lot more than this with Group Policy - you can configure and enforce endless amounts of settings on client machines from the simple - wallpaper for example - to software installs to executable restrictions...

This is a big plus for locking down mostly untrusted users (eg average employees in a larger enterprise).

Edited to fix stupid autocorrect.

Re: Filezilla installer is suspicious again

#223
post #132
post #71

Earlier quoted context omitted.

Getting off platforms is usually quite hard with most trying to be as sticky as possible. The common reason why people tend to stick to Windows is games, even if the situation has gotten better. Personally I have come to the conclusion that the best solution is virtual machines with a linux base system. Put every game that is sticky to windows into its own little container and just have hardware passed through. That…

> Personally I have come to the conclusion that the best solution is virtual machines with a linux base system. Put every game that is sticky to windows into its own little container and just have hardware passed through. Is there a Windows license available to consumers that allows simultaneous installation on multiple VMs under a non-Windows-based hypervisor?

Not really no. I recall that linus tech tips had same question when they made a similar setup.

The question about "how many installations does one license allow" does not seem to be much explored by the courts, so I am not that worried for personal setup like this. One could argue that multiple VM is just technical details for what is in practical terms a single user and a single machine.

Re: Filezilla installer is suspicious again

#224
post #213

Earlier quoted context omitted.

"things often work better when you pay people upfront rather than get something for free and let them fend for themselves"... Whoah, for a second I thought this was 1999.

Looking at the official numbers of desktop Linux installed systems looks like it.

Why would we take that one, narrow specific segment of software taken as an example of the success or value of open source as a whole? It would be as useful as comparing web server software market share as an indicator of whether Microsoft has succeeded as a company.

Re: Filezilla installer is suspicious again

#225
post #184

Earlier quoted context omitted.

"things often work better when you pay people upfront rather than get something for free and let them fend for themselves"... Whoah, for a second I thought this was 1999.

I guess I must have fallen into a time machine since I just purchased Photoshop last month.

That would be which logical fallacy? Something where you take something I said to a nonsensical extreme? I certainly never asserted that people did not pay for software. My point is that free software is very proven as a development, distribution, whatever method by now.

Re: Filezilla installer is suspicious again

#226

Earlier quoted context omitted.

It sounds like you have a lot more experience with windows than other platforms. Many who have mainly used windows haven't experienced what typical software installation is like on systems like Linux. One hardly ever needs to run on trusted executables, for any reason. If you do, they come from one or two trusted sources, not one of hundreds of private websites. That is just not how Linux software is distributed. It…

My experience ranges across platforms which is why I call out this ridiculous bias when I see it, especially when it uses dumb examples like Filezilla to represent the whole. Look at the other options for Filezilla downloads. The default Mac one is the same bundled crap from the same source. The Linux one is from the same source too. Of course I would be unreasonable to criticize the other platforms if the forum post…

I certainly would use my package manager to install this. Having the latest version isn't critical, and if it was, I would compile from source. Apt likely protects you from exactly what's being discussed here, as well as from the need to compile from source.

I don't think the comparison of the "wizard" to installing from apt or similar is hyperbole. I'm familiar with the typical Windows apps install process, and I do indeed warrant that that is a realistic comparison. GUI software is more difficult to automate and presents information in a way that's difficult to absorb at a glance, for me.

The 'wizard' does not require a steady 10 minutes of attention, but I don't think 20 clicks is an exaggeration. How many sounds right to you? If you want, I can write an essay contrasting software installation on these platforms because what I wrote sounds right on to me. The fact is that standard procedure to install software on Windows involves clicking "next" over and over again after downloading a binary from some random website.

Re: Filezilla installer is suspicious again

#228

Earlier quoted context omitted.

Meh, they don't keep versions up to date. That version in the apt repo is several versions behind (not to mention how far behind they are on 16.04 repos), not something you usually want to do with network software like Filezilla. My comment listed just 4 pieces of software off the top of my head I installed on a fresh desktop recently, and I wouldn't get any of them from default apt install.

Honorable providers, for example the Tor and MPTCP projects, run their own repositories, with GnuPG-authenticated packages. You get up-to-date builds, with no crap.

But this negates the advantage of having a small number of trusted repos if you need to add third-party repos for every project.

Re: Filezilla installer is suspicious again

#229

Earlier quoted context omitted.

Meh, they don't keep versions up to date. That version in the apt repo is several versions behind (not to mention how far behind they are on 16.04 repos), not something you usually want to do with network software like Filezilla. My comment listed just 4 pieces of software off the top of my head I installed on a fresh desktop recently, and I wouldn't get any of them from default apt install.

Honorable providers, for example the Tor and MPTCP projects, run their own repositories, with GnuPG-authenticated packages. You get up-to-date builds, with no crap.

So long as the provider remains honorable. If they decided to bundle malicious programs -- or someone who took control if their domain and private key did -- they easily could.

They could publish updates to the program, publish new dependencies, or even publish updates to packages you normally get from your main distro repository. If you're doing apt-get update (or equivalent) how closely do you scrutinize the list of changes?

Re: Filezilla installer is suspicious again

#230
post #103

Earlier quoted context omitted.

Hey, mine too! I actually had that, reformatted, it was fixed for a while, and it's back to doing it again. The worst part is when windows will start ignoring my request to delay updates to the weekend, and will begin restarting my computer during the week whenever I walk away from it for too long.

Flash backs to the Win XP restart dialog that popped up every 20 minutes until you couldn't take it anymore.

At least you could kill or permanently disable the updater service via services.msc and it would honor your request. Sometimes an update for that service would come out and reactivate it but that was a rare occurrence.
Post reply on HN