Re: SourceForge unethical behavior
ronys <[email protected]> Mon, 8 Jun 2015 09:51:27 +0300
| Newsgroups | gmane.comp.security.passwordsafe.user |
|---|---|
| Message-ID | <CAKUoDdLrunfu6BFW601N1smS53-aG62J78XT+w6zmR0w35yrvA@mail.gmail.com> |
--===============4089213966716720055== Content-Type: multipart/alternative; boundary=001a1134de942415aa0517fc12eb --001a1134de942415aa0517fc12eb Content-Type: text/plain; charset=UTF-8 Well, according to the article, the best protection against "bundle-ware" installers for PasswordSafe is to keep the project active on SF. A couple of years ago SF approached me with the idea of bundle-ware, which I politely refused. End of story (or so I thought...). I will take a long hard look at migrating to another project hosting site once the forthcoming release (3.36 - uploaded but not yet formally announced) is out. Until then, you can verify PasswordSafe downloads against my GPG signature and the hashes that I publish in the release annoucement. Cheers, Rony On Sun, Jun 7, 2015 at 4:37 PM, Donald King <[email protected]> wrote: > Given the recent unethical behavior from SourceForge [1], specifically > tricking people into installing adware-wrapped versions of Open Source > software and hijacking the GIMP SourceForge account to do it, will Password > Safe be migrating to another project hosting site? I'm not sure I can > trust Password Safe downloads from SourceForge anymore. > > [1] > http://arstechnica.com/information-technology/2015/06/sourceforge-locked-in-projects-of-fleeing-users-cashed-in-on-malvertising/ > > -- > Donald King > http://www.chronos-tachyon.net/ > > > ------------------------------------------------------------------------------ > > _______________________________________________ > Passwordsafe-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/passwordsafe-users > > -- Ubi dubium, ibi libertas (where there is doubt, there is freedom) --001a1134de942415aa0517fc12eb Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-size:small">Wel= l, according to the article, the best protection against "bundle-ware&= quot; installers for PasswordSafe is to keep the project active on SF. A co= uple of years ago SF approached me with the idea of bundle-ware, which I po= litely refused. End of story (or so I thought...).</div><div class=3D"gmail= _default" style=3D"font-size:small"><br></div><div class=3D"gmail_default" = style=3D"font-size:small">I will take a long hard look at migrating to=C2= =A0<span style=3D"font-size:12.8000001907349px">another project hosting sit= e once the forthcoming release (3.36 - uploaded but not yet formally announ= ced) is out.</span></div><div class=3D"gmail_default" style=3D"font-size:sm= all"><span style=3D"font-size:12.8000001907349px"><br></span></div><div cla= ss=3D"gmail_default" style=3D"font-size:small"><span style=3D"font-size:12.= 8000001907349px">Until then, you can verify PasswordSafe downloads against = my GPG signature and the hashes that I publish in the release annoucement.<= /span></div><div class=3D"gmail_default" style=3D"font-size:small"><span st= yle=3D"font-size:12.8000001907349px"><br></span></div><div class=3D"gmail_d= efault" style=3D"font-size:small"><span style=3D"font-size:12.8000001907349= px">Cheers,</span></div><div class=3D"gmail_default" style=3D"font-size:sma= ll"><span style=3D"font-size:12.8000001907349px"><br></span></div><div clas= s=3D"gmail_default" style=3D"font-size:small"><span style=3D"font-size:12.8= 000001907349px">=C2=A0 Rony</span></div><input name=3D"virtru-metadata" typ= e=3D"hidden" value=3D"{"email-policy":{"state":"cl= osed","expirationUnit":"days","disableCopyPas= te":false,"disablePrint":false,"disableForwarding"= :false,"expires":false},"attachments":{}}"></div><div c= lass=3D"gmail_extra"><br><div class=3D"gmail_quote">On Sun, Jun 7, 2015 at = 4:37 PM, Donald King <span dir=3D"ltr"><<a href=3D"mailto:chronos@chrono= s-tachyon.net" target=3D"_blank">[email protected]</a>></span>= wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;bor= der-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr">Given the recent= unethical behavior from SourceForge [1], specifically tricking people into= installing adware-wrapped versions of Open Source software and hijacking t= he GIMP SourceForge account to do it, will Password Safe be migrating to an= other project hosting site?=C2=A0 I'm not sure I can trust Password Saf= e downloads from SourceForge anymore.<div><br></div><div>[1] <a href=3D"htt= p://arstechnica.com/information-technology/2015/06/sourceforge-locked-in-pr= ojects-of-fleeing-users-cashed-in-on-malvertising/" target=3D"_blank">http:= //arstechnica.com/information-technology/2015/06/sourceforge-locked-in-proj= ects-of-fleeing-users-cashed-in-on-malvertising/</a><span class=3D"HOEnZb">= <font color=3D"#888888"><br clear=3D"all"><div><br></div>-- <br><div>Donald= King<br><a href=3D"http://www.chronos-tachyon.net/" target=3D"_blank">http= ://www.chronos-tachyon.net/</a><br></div> </font></span></div></div> <br>-----------------------------------------------------------------------= -------<br> <br>_______________________________________________<br> Passwordsafe-users mailing list<br> <a href=3D"mailto:[email protected]">Passwordsafe-us= [email protected]</a><br> <a href=3D"https://lists.sourceforge.net/lists/listinfo/passwordsafe-users"= target=3D"_blank">https://lists.sourceforge.net/lists/listinfo/passwordsaf= e-users</a><br> <br></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><div cla= ss=3D"gmail_signature">Ubi dubium, ibi libertas (where there is doubt, ther= e is freedom)<br></div> </div> --001a1134de942415aa0517fc12eb-- --===============4089213966716720055== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------------ --===============4089213966716720055== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Passwordsafe-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/passwordsafe-users --===============4089213966716720055==--