Re: SourceForge unethical behavior

ronys <[email protected]> Mon, 8 Jun 2015 09:51:27 +0300
Newsgroups gmane.comp.security.passwordsafe.user
Message-ID <CAKUoDdLrunfu6BFW601N1smS53-aG62J78XT+w6zmR0w35yrvA@mail.gmail.com>
--===============4089213966716720055==
Content-Type: multipart/alternative; boundary=001a1134de942415aa0517fc12eb

--001a1134de942415aa0517fc12eb
Content-Type: text/plain; charset=UTF-8

Well, according to the article, the best protection against "bundle-ware"
installers for PasswordSafe is to keep the project active on SF. A couple
of years ago SF approached me with the idea of bundle-ware, which I
politely refused. End of story (or so I thought...).

I will take a long hard look at migrating to another project hosting site
once the forthcoming release (3.36 - uploaded but not yet formally
announced) is out.

Until then, you can verify PasswordSafe downloads against my GPG signature
and the hashes that I publish in the release annoucement.

Cheers,

  Rony

On Sun, Jun 7, 2015 at 4:37 PM, Donald King <[email protected]>
wrote:

> Given the recent unethical behavior from SourceForge [1], specifically
> tricking people into installing adware-wrapped versions of Open Source
> software and hijacking the GIMP SourceForge account to do it, will Password
> Safe be migrating to another project hosting site?  I'm not sure I can
> trust Password Safe downloads from SourceForge anymore.
>
> [1]
> http://arstechnica.com/information-technology/2015/06/sourceforge-locked-in-projects-of-fleeing-users-cashed-in-on-malvertising/
>
> --
> Donald King
> http://www.chronos-tachyon.net/
>
>
> ------------------------------------------------------------------------------
>
> _______________________________________________
> Passwordsafe-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/passwordsafe-users
>
>


-- 
Ubi dubium, ibi libertas (where there is doubt, there is freedom)

--001a1134de942415aa0517fc12eb
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-size:small">Wel=
l, according to the article, the best protection against &quot;bundle-ware&=
quot; installers for PasswordSafe is to keep the project active on SF. A co=
uple of years ago SF approached me with the idea of bundle-ware, which I po=
litely refused. End of story (or so I thought...).</div><div class=3D"gmail=
_default" style=3D"font-size:small"><br></div><div class=3D"gmail_default" =
style=3D"font-size:small">I will take a long hard look at migrating to=C2=
=A0<span style=3D"font-size:12.8000001907349px">another project hosting sit=
e once the forthcoming release (3.36 - uploaded but not yet formally announ=
ced) is out.</span></div><div class=3D"gmail_default" style=3D"font-size:sm=
all"><span style=3D"font-size:12.8000001907349px"><br></span></div><div cla=
ss=3D"gmail_default" style=3D"font-size:small"><span style=3D"font-size:12.=
8000001907349px">Until then, you can verify PasswordSafe downloads against =
my GPG signature and the hashes that I publish in the release annoucement.<=
/span></div><div class=3D"gmail_default" style=3D"font-size:small"><span st=
yle=3D"font-size:12.8000001907349px"><br></span></div><div class=3D"gmail_d=
efault" style=3D"font-size:small"><span style=3D"font-size:12.8000001907349=
px">Cheers,</span></div><div class=3D"gmail_default" style=3D"font-size:sma=
ll"><span style=3D"font-size:12.8000001907349px"><br></span></div><div clas=
s=3D"gmail_default" style=3D"font-size:small"><span style=3D"font-size:12.8=
000001907349px">=C2=A0 Rony</span></div><input name=3D"virtru-metadata" typ=
e=3D"hidden" value=3D"{&quot;email-policy&quot;:{&quot;state&quot;:&quot;cl=
osed&quot;,&quot;expirationUnit&quot;:&quot;days&quot;,&quot;disableCopyPas=
te&quot;:false,&quot;disablePrint&quot;:false,&quot;disableForwarding&quot;=
:false,&quot;expires&quot;:false},&quot;attachments&quot;:{}}"></div><div c=
lass=3D"gmail_extra"><br><div class=3D"gmail_quote">On Sun, Jun 7, 2015 at =
4:37 PM, Donald King <span dir=3D"ltr">&lt;<a href=3D"mailto:chronos@chrono=
s-tachyon.net" target=3D"_blank">[email protected]</a>&gt;</span>=
 wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;bor=
der-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr">Given the recent=
 unethical behavior from SourceForge [1], specifically tricking people into=
 installing adware-wrapped versions of Open Source software and hijacking t=
he GIMP SourceForge account to do it, will Password Safe be migrating to an=
other project hosting site?=C2=A0 I&#39;m not sure I can trust Password Saf=
e downloads from SourceForge anymore.<div><br></div><div>[1] <a href=3D"htt=
p://arstechnica.com/information-technology/2015/06/sourceforge-locked-in-pr=
ojects-of-fleeing-users-cashed-in-on-malvertising/" target=3D"_blank">http:=
//arstechnica.com/information-technology/2015/06/sourceforge-locked-in-proj=
ects-of-fleeing-users-cashed-in-on-malvertising/</a><span class=3D"HOEnZb">=
<font color=3D"#888888"><br clear=3D"all"><div><br></div>-- <br><div>Donald=
 King<br><a href=3D"http://www.chronos-tachyon.net/" target=3D"_blank">http=
://www.chronos-tachyon.net/</a><br></div>
</font></span></div></div>
<br>-----------------------------------------------------------------------=
-------<br>
<br>_______________________________________________<br>
Passwordsafe-users mailing list<br>
<a href=3D"mailto:[email protected]">Passwordsafe-us=
[email protected]</a><br>
<a href=3D"https://lists.sourceforge.net/lists/listinfo/passwordsafe-users"=
 target=3D"_blank">https://lists.sourceforge.net/lists/listinfo/passwordsaf=
e-users</a><br>
<br></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><div cla=
ss=3D"gmail_signature">Ubi dubium, ibi libertas (where there is doubt, ther=
e is freedom)<br></div>
</div>

--001a1134de942415aa0517fc12eb--


--===============4089213966716720055==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------

--===============4089213966716720055==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Passwordsafe-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/passwordsafe-users

--===============4089213966716720055==--