Re: Move from Sourceforge

Fabian Keil <[email protected]> Sat, 31 Oct 2015 20:14:04 +0100
Newsgroups gmane.comp.web.privoxy.devel
Message-ID <[email protected]>
Ian Silvester <[email protected]> wrote:

> On 2015-10-30 10:36, Fabian Keil wrote:
> > Ian Silvester <[email protected]> wrote:
> >  
> >> I have today learnt that Sourceforge is blocked by uBlock's default
> >> ruleset, ostensibly because of the unpleasant badware they push
> >> aggressively when one downloads any genuine files.
> >>
> >> I was in discussion with the author of a fairly good security guide for
> >> OS X who currently promotes the Homebrew installer for Privoxy. This is
> >> inferior to ours for a number of reasons, not least that Privoxy is
> >> executed using the interative user account that was used when installing
> >> it. He is however unwilling to alter his guide to promote the 'official'
> >> binary package due to the problem detailed in the first paragraph.  
> > Given that the OS X packages come with OpenPGP signatures
> > (a security guide could mention) that seems to be a strange
> > position to me.  
> As I understand it it's that if readers have followed his guide they'll 
> have installed uBlock and hence would be blocked from visiting 
> Sourceforge at all.

I see.

> > Anyway, it if helps, we could also make the OS X binaries available
> > from the hidden service page (http://jvauzb4sb3bwlsnc.onion/) which is
> > outside SourceForge's control and provides end-to-end encryption (on top
> > of the signature files).  
> This doesn't route for me - I assume it depends upon Tor?

You assume correctly.

> I'll consider temporarily hosting the OS X binary packages myself for 
> those who won't or can't visit Sourceforge.

Sounds good to me. If uBlock doesn't block SourceForge IP addresses
as well, we could additionally put the files on the website or add
a redirect from there to your system.

[...]
> > If you are comfortable with using Github for Mac OS X development
> > and none of the other OS X developers and contributors object,
> > you could migrate the OS X stuff at your earliest convenience
> > (and migrate again if/when Github starts to follow SF's "lead"
> > or better options become available).
> >
> > After all, Github currently isn't worse than SF and OS X users
> > are unlikely to complain about Github being a proprietary service
> > anyway ...  
> On reflection I'd prefer not to fragment our offering. Please delegate 
> any setup items to me that you need to once the host is chosen; I'm keen 
> to help share the load in any way I feasibly can.

Great. Thanks for the offer.

Fabian

------------------------------------------------------------------------------

_______________________________________________
Ijbswa-developers mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ijbswa-developers
signature.asc (application/pgp-signature, 819 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=iNY6
-----END PGP SIGNATURE-----