Sourceforge Hijacks the Nmap Sourceforge Account

#1

Post by netw0rksec » Wed, Jun 03, 2015, 8:08 AM UTC

Sourceforge Hijacks the Nmap Sourceforge Account
seclists.org

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#2

Post by vortico » Wed, Jun 03, 2015, 8:18 AM UTC

How to literally kill your company:

1. this

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#3

Post by mahouse » Wed, Jun 03, 2015, 8:34 AM UTC

vortico wrote: post #2

How to literally kill your company: 1. this

I'm pretty sure they are earning some money off this, and taking into account the website was going to die anyway, I don't think this is negative thing for them to do.

https://www.google.com/trends/explore#q=%2Fm%2F02p0tdp

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#4

Post by dagw » Wed, Jun 03, 2015, 8:37 AM UTC

vortico wrote: post #2

How to literally kill your company: 1. this

The company is already dead. This is simply looting the corps.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#5

Post by etix » Wed, Jun 03, 2015, 8:51 AM UTC

The VLC account has also been hijacked but without wrapping the installer: https://blog.l0cal.com/2015/06/02/what-happened-to-sourcefor...

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#6

Post by DanBC » Wed, Jun 03, 2015, 8:52 AM UTC

I'm surprised the nmap.mirror site doesn't have hundreds of reviews telling people to not use it, and pointing them to the official site.

I'd be interested to see how sourceforge respond to DMCA requests.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#7

Post by spacefight » Wed, Jun 03, 2015, 8:55 AM UTC

One should sue for trademark violation. I'll chip in if anyone is fundraising.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#8

Post by ExpiredLink » Wed, Jun 03, 2015, 9:04 AM UTC

>> SourceForge.net is owned and operated by Slashdot Media. Slashdot Media is a DHI Group, Inc. company.

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#9

Post by neslinesli93 » Wed, Jun 03, 2015, 9:07 AM UTC

In spite of account hijacking, GIMP was still downloaded by almost 15k people this week. Six days ago they took over Audacity project as well, which was downloaded by more than 150k this week[0].

[0] http://sourceforge.net/projects/audacity/

Re: Sourceforge Hijacks the Nmap Sourceforge Account

#10

Post by omegafail » Wed, Jun 03, 2015, 9:15 AM UTC

neslinesli93 wrote: post #9

In spite of account hijacking, GIMP was still downloaded by almost 15k people this week. Six days ago they took over Audacity project as well, which was downloaded by more than 150k this week[0]. [0] http://sourceforge.net/projects/audacity/

What will happen if I run Audacity installer from sourceforge?

I have done that an hour ago. Should I be concerned?