Live data from Hacker News

Filezilla installer is suspicious again

forum.filezilla-project.org

41–50 of 258 posts

Re: Filezilla installer is suspicious again

#41
post #21

Any impact on the Linux versions of filezilla?

I don't see why, being on Linux, you would prefer to use FileZilla to transfer files to a remote machine over an insecure protocol when there are plenty of alternatives with better security. Rsync, for example, allows you to specify an SSH key. Or SCP, which also offers the same functionality.

Re: Filezilla installer is suspicious again

#42
post #26

Earlier quoted context omitted.

Vendors who have partaken in the "bundled crapware" model of distribution - Google, Amazon, Yahoo, Microsoft, Adobe, Oracle, etc, etc. >They have decided that tricking people into downloading malware is a reasonable alternative to charging money for their software or soliciting donations. If you would be so kind enough as to show them how to make money perhaps they'll stop doing it. >Its truly amazing to me that inst…

I would rather they go out of business if they can't figure out another way to make money. You CAN install binaries on other platforms but on for example linux distros their is a curated platform of packages where you can get most/all software. The fact that this is the default way to install software and regular users don't need to look beyond the official repos is why installing software on linux isn't this kind of…

> I would rather they go out of business if they can't figure out another way to make money.

Only for some other unscrupulous company to replace them? Ideally, the most profitable method should be ethical by nature, unlike the current situation in software (and games, of course) where the most profitable methods are among the least ethical.

Re: Filezilla installer is suspicious again

#43
post #21

Any impact on the Linux versions of filezilla?

I don't see why, being on Linux, you would prefer to use FileZilla to transfer files to a remote machine over an insecure protocol when there are plenty of alternatives with better security. Rsync, for example, allows you to specify an SSH key. Or SCP, which also offers the same functionality.

This is a really toxic attitude in the open source community where when asked a question the answer is: "you're doing it wrong, just do it right".

If I had a choice I would, but unless you have a few million dollars to give us to refactor 30 years of technical debt, please answer the question.

Re: Filezilla installer is suspicious again

#45
post #21

Any impact on the Linux versions of filezilla?

I don't see why, being on Linux, you would prefer to use FileZilla to transfer files to a remote machine over an insecure protocol when there are plenty of alternatives with better security. Rsync, for example, allows you to specify an SSH key. Or SCP, which also offers the same functionality.

Familiarity and consistency across platforms are two obvious reasons that come to mind. Another is that it's easier for those unfamiliar with a terminal.

Re: Filezilla installer is suspicious again

#46
post #9

Suspicious? Let’s call this what it really is: The FileZilla owners are actively encouraging users to install malware as a way to monetize. That is very clear. Avoid FileZilla by all means.

If what you say is true a more productive approach is to make a derivative of the last known non-malware release of FileZilla with a new name. FileZilla's code respects your software freedom (FileZilla is licensed under the GNU GPL v2, last I knew), so there's no reason not to use that freedom to make a derivative which doesn't come with a tricky installer. Rejecting free software when improvements can be had is an overreaction that could lead to a reduction in software freedom which would obviously be bad. Free software is the path to being able to trust the software you run.

Re: Filezilla installer is suspicious again

#47
post #21

Any impact on the Linux versions of filezilla?

I don't see why, being on Linux, you would prefer to use FileZilla to transfer files to a remote machine over an insecure protocol when there are plenty of alternatives with better security. Rsync, for example, allows you to specify an SSH key. Or SCP, which also offers the same functionality.

Filezilla has a very convenient GUI...

Re: Filezilla installer is suspicious again

#48
post #21

Any impact on the Linux versions of filezilla?

I don't see why, being on Linux, you would prefer to use FileZilla to transfer files to a remote machine over an insecure protocol when there are plenty of alternatives with better security. Rsync, for example, allows you to specify an SSH key. Or SCP, which also offers the same functionality.

Filezilla does not just speak plain FTP, and you don't always get a choice.

Re: Filezilla installer is suspicious again

#49
post #26

Earlier quoted context omitted.

Vendors who have partaken in the "bundled crapware" model of distribution - Google, Amazon, Yahoo, Microsoft, Adobe, Oracle, etc, etc. >They have decided that tricking people into downloading malware is a reasonable alternative to charging money for their software or soliciting donations. If you would be so kind enough as to show them how to make money perhaps they'll stop doing it. >Its truly amazing to me that inst…

I would rather they go out of business if they can't figure out another way to make money. You CAN install binaries on other platforms but on for example linux distros their is a curated platform of packages where you can get most/all software. The fact that this is the default way to install software and regular users don't need to look beyond the official repos is why installing software on linux isn't this kind of…

Well, I do think there is some hypocrisy on the part of people (including myself) enjoying free software and services, when the revenue of those is generated by unaware people clicking on ads or accidentally installing crapware.

>You CAN install binaries on other platforms but on for example linux distros their is a curated platform of packages where you can get most/all software.

Sure, but things often work better when you pay people upfront rather than get something for free and let them fend for themselves. In the case of Linux packaging, there is no mechanism for monetization or advertising, so the point doesn't come up.

>The fact that this is the default way to install software and regular users don't need to look beyond the official repos is why installing software on linux isn't this kind of shit show.

I'd use Linux if it had the software that I want to use. So a bit of apples-oranges here...

Post reply on HN