Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Filezilla installer is suspicious again

forum.filezilla-project.org

Post reply on HN
Print view View original

91–100 of 258 posts

Re: Filezilla installer is suspicious again

#91

Post by [deleted] »

codedokode wrote: post #83
NiveaGeForce wrote: post #73

Earlier quoted context omitted.

> Its truly amazing to me that installing windows software is still like this It doesn't have to be that way, since there is a Windows/Microsoft Store since plenty of years now. But then you have gamers and game devs spreading FUD about UWP and the the MS Store, while they praise 3rd party platforms like Steam and GoG that actively refuse UWP apps in their store, while allowing Spyware like this. https://www.reddit.c…

Microsoft itself is collecting a lot of telemetry even in Basic configuration [1], for example, if you use UAC (privileges elevation popup) they collect "the full command line arguments being used to elevate.". Also they collect a lot of hardware identifiers (including IMEI - unique phone identifier that allows to track it) so later they can reliably prove that some user was using this computer at this time. What a n…

[deleted]

Re: Filezilla installer is suspicious again

#92

Post by michaelmrose »

NiveaGeForce wrote: post #73
michaelmrose wrote: post #18

Botg site admin "The hash doesn't match because the filename doesn't match." A fully descriptive answer is that they don't have a checksum for the bundled package but botg doesn't want to say this. " Dangerously ignorant user. Not matching filename = the checksum is NOT for that file. Checksums can only be provided for the non-bundled packages, because they're static. Bundled installers are not." Dangerously ignorant…

> Its truly amazing to me that installing windows software is still like this It doesn't have to be that way, since there is a Windows/Microsoft Store since plenty of years now. But then you have gamers and game devs spreading FUD about UWP and the the MS Store, while they praise 3rd party platforms like Steam and GoG that actively refuse UWP apps in their store, while allowing Spyware like this. https://www.reddit.c…

The long term solution CAN'T be the MS store. It requires asking Microsoft for permission to compete with them. It gives MS permission to bar entire categories of software globally or in your particular market.

Giving the party running the store 30% of all revenue is a hard sale to start with.

More importantly it gives MS the position to impose whatever dictates it or even more likely every government in existence the right to impose whatever restrictions they like on any app maker in existence with the threat of instant non existence.

Want a social media platform to ban anyone who disagrees with the king no problem do it or you can't do business. Want your browser to censor whatever your locality wants? No problem if it doesn't it doesn't get distributed. Want your OS to refuse to install apps that don't follow the store rules? No problem its in the governments interests and the companies.

Linux package management works like an app store with an official source and the ability to add whichever sources you choose. A search of available packages shows results giving sources the priority set by the user. Updating the system updates packages from 3rd party sources same as others. The major limitation is the labour required to create packages for all the different platforms users prefer not artificial limits or money paid to the platform "owner".

On windows nothing much is on the store mostly because people don't want to give Microsoft 30% on Linux charging 30% is downright impossible because people would trivially publish an alternative source instead.

Basically your cure is worse than the disease and since Microsoft wont fix the situation in a reasonable fashion so the only solution is to move off their platform.

Re: Filezilla installer is suspicious again

#93

Post by ksk »

rspeer wrote: post #80
ksk wrote: post #67

Earlier quoted context omitted.

>Such as installing WinSCP from Ninite instead of installing FileZilla by any method. https://en.wikipedia.org/wiki/WinSCP#Advertisements_in_insta... >You keep denying that trustworthy free software exists, and yet when anyone points out that it does, you change the topic. People who cheat on tests believe everyone is cheating on tests. You are unable to understand how "trustworthy free software" vendors make money.…

It would have been a bad idea to use WinSCP in 2014 also. Yet you'll notice they backed off and have had years to repair their reputation, instead of getting caught a second time and trying to cover it up like FileZilla is doing. I understand how your kind of free software makes money perfectly well. It's not trustworthy in the slightest. You don't need to make money to make a program that copies files. And if you bu…

You seem very confused. FileZilla wasn't "caught". They openly say that they bundle crapware. Sorry, this is not a productive conversation. Goodbye.

Re: Filezilla installer is suspicious again

#94

Post by willio58 »

DmenshunlAnlsis wrote: post #15
blibble wrote: post #12

Earlier quoted context omitted.

winscp has also previously bundled crapware (OpenCandy) https://en.wikipedia.org/wiki/WinSCP#Advertisements_in_insta...

Four years ago, with no incidents since.

It’s funny to see defense of a program that intentionally included adware in a previous version.

Re: Filezilla installer is suspicious again

#95

Post by codedokode »

michaelmrose wrote: post #18

Botg site admin "The hash doesn't match because the filename doesn't match." A fully descriptive answer is that they don't have a checksum for the bundled package but botg doesn't want to say this. " Dangerously ignorant user. Not matching filename = the checksum is NOT for that file. Checksums can only be provided for the non-bundled packages, because they're static. Bundled installers are not." Dangerously ignorant…

I think the long term solution would be to forbid deceiving users by software vendors. Users should know exactly what they are paying with.

Now the vendors who sell software that doesn't have hidden functionality lose competition to such "free" products monetized with adware, data collection or other shady behaviours. It is easy to see in mobile game market.

Re: Filezilla installer is suspicious again

#96

Post by NiveaGeForce »

michaelmrose wrote: post #92
NiveaGeForce wrote: post #73

Earlier quoted context omitted.

> Its truly amazing to me that installing windows software is still like this It doesn't have to be that way, since there is a Windows/Microsoft Store since plenty of years now. But then you have gamers and game devs spreading FUD about UWP and the the MS Store, while they praise 3rd party platforms like Steam and GoG that actively refuse UWP apps in their store, while allowing Spyware like this. https://www.reddit.c…

The long term solution CAN'T be the MS store. It requires asking Microsoft for permission to compete with them. It gives MS permission to bar entire categories of software globally or in your particular market. Giving the party running the store 30% of all revenue is a hard sale to start with. More importantly it gives MS the position to impose whatever dictates it or even more likely every government in existence th…

> Giving the party running the store 30% of all revenue is a hard sale to start with.

Very soon it won't be 30% anymore.

https://blogs.windows.com/buildingapps/2018/05/07/a-new-micr...

> Linux package management works like an app store with an official source and the ability to add whichever sources you choose. A search of available packages shows results giving sources the priority set by the user. Updating the system updates packages from 3rd party sources same as others.

There exist 3rd party package repositories on Windows too.

> On windows nothing much is on the store mostly because people don't want to give Microsoft 30%

There is plenty of stuff in the MS Store. https://youtu.be/GCVhmKVRkk0

All my software, except for some dev tools and some games are from the MS Store.

> on Linux charging 30% is downright impossible because people would trivially publish an alternative source instead.

Steam is on Linux and charges 30%.

> Basically your cure is worse than the disease and since Microsoft wont fix the situation in a reasonable fashion so the only solution is to move off their platform.

Microsoft already provided a fix, called UWP.

Re: Filezilla installer is suspicious again

#97

Post by michaelmrose »

NiveaGeForce wrote: post #96
michaelmrose wrote: post #92

Earlier quoted context omitted.

The long term solution CAN'T be the MS store. It requires asking Microsoft for permission to compete with them. It gives MS permission to bar entire categories of software globally or in your particular market. Giving the party running the store 30% of all revenue is a hard sale to start with. More importantly it gives MS the position to impose whatever dictates it or even more likely every government in existence th…

> Giving the party running the store 30% of all revenue is a hard sale to start with. Very soon it won't be 30% anymore. https://blogs.windows.com/buildingapps/2018/05/07/a-new-micr... > Linux package management works like an app store with an official source and the ability to add whichever sources you choose. A search of available packages shows results giving sources the priority set by the user. Updating the syst…

"There exist 3rd party package repositories on Windows too."

The MS store does NOT have user configurable repos for consumer versions of windows.

Re: Filezilla installer is suspicious again

#98

Post by NiveaGeForce »

codedokode wrote: post #83
NiveaGeForce wrote: post #73

Earlier quoted context omitted.

> Its truly amazing to me that installing windows software is still like this It doesn't have to be that way, since there is a Windows/Microsoft Store since plenty of years now. But then you have gamers and game devs spreading FUD about UWP and the the MS Store, while they praise 3rd party platforms like Steam and GoG that actively refuse UWP apps in their store, while allowing Spyware like this. https://www.reddit.c…

Microsoft itself is collecting a lot of telemetry even in Basic configuration [1], for example, if you use UAC (privileges elevation popup) they collect "the full command line arguments being used to elevate.". Also they collect a lot of hardware identifiers (including IMEI - unique phone identifier that allows to track it) so later they can reliably prove that some user was using this computer at this time. What a n…

Do you rather trust arbitrary 3rd party Win32 apps, that have free reign to crawl your whole user profile and mess with the integrity of your system?

If you're already on Windows 10, at the very least embrace UWP to get some control over your privacy.

Re: Filezilla installer is suspicious again

#99

Post by rhizome »

Digital-Citizen wrote: post #46
st3fan wrote: post #9

Suspicious? Let’s call this what it really is: The FileZilla owners are actively encouraging users to install malware as a way to monetize. That is very clear. Avoid FileZilla by all means.

If what you say is true a more productive approach is to make a derivative of the last known non-malware release of FileZilla with a new name. FileZilla's code respects your software freedom (FileZilla is licensed under the GNU GPL v2, last I knew), so there's no reason not to use that freedom to make a derivative which doesn't come with a tricky installer. Rejecting free software when improvements can be had is an o…

The hard part is search engine ranking.

Re: Filezilla installer is suspicious again

#100

Post by kjrose »

VonGuard wrote: post #32
kjrose wrote: post #11

Earlier quoted context omitted.

Yep. This matches behavior I've seen many times before from other software companies. In every circumstance I immediately ceased using anything made by them.

They did this before. Used to have Binkiland included in the installer from Soureceforge. They stopped, but obviously they're right back at it again.

Yeah. But I always blamed that more on sourceforge than filezilla.
Post reply on HN