Re: Move from Sourceforge
Fabian Keil <[email protected]> Sat, 31 Oct 2015 20:14:04 +0100
| Newsgroups | gmane.comp.web.privoxy.devel |
|---|---|
| Message-ID | <[email protected]> |
Ian Silvester <[email protected]> wrote: > On 2015-10-30 10:36, Fabian Keil wrote: > > Ian Silvester <[email protected]> wrote: > > > >> I have today learnt that Sourceforge is blocked by uBlock's default > >> ruleset, ostensibly because of the unpleasant badware they push > >> aggressively when one downloads any genuine files. > >> > >> I was in discussion with the author of a fairly good security guide for > >> OS X who currently promotes the Homebrew installer for Privoxy. This is > >> inferior to ours for a number of reasons, not least that Privoxy is > >> executed using the interative user account that was used when installing > >> it. He is however unwilling to alter his guide to promote the 'official' > >> binary package due to the problem detailed in the first paragraph. > > Given that the OS X packages come with OpenPGP signatures > > (a security guide could mention) that seems to be a strange > > position to me. > As I understand it it's that if readers have followed his guide they'll > have installed uBlock and hence would be blocked from visiting > Sourceforge at all. I see. > > Anyway, it if helps, we could also make the OS X binaries available > > from the hidden service page (http://jvauzb4sb3bwlsnc.onion/) which is > > outside SourceForge's control and provides end-to-end encryption (on top > > of the signature files). > This doesn't route for me - I assume it depends upon Tor? You assume correctly. > I'll consider temporarily hosting the OS X binary packages myself for > those who won't or can't visit Sourceforge. Sounds good to me. If uBlock doesn't block SourceForge IP addresses as well, we could additionally put the files on the website or add a redirect from there to your system. [...] > > If you are comfortable with using Github for Mac OS X development > > and none of the other OS X developers and contributors object, > > you could migrate the OS X stuff at your earliest convenience > > (and migrate again if/when Github starts to follow SF's "lead" > > or better options become available). > > > > After all, Github currently isn't worse than SF and OS X users > > are unlikely to complain about Github being a proprietary service > > anyway ... > On reflection I'd prefer not to fragment our offering. Please delegate > any setup items to me that you need to once the host is chosen; I'm keen > to help share the load in any way I feasibly can. Great. Thanks for the offer. Fabian ------------------------------------------------------------------------------ _______________________________________________ Ijbswa-developers mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/ijbswa-developers
signature.asc
(application/pgp-signature, 819 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJWNRL9AAoJEGkYIpGLojccEDIP/3fel8kr/L+abRpqUvhL9CJx 69hbS+LDqWBav/HO5rwO6qhI+DVzqZ84X5WaBmzja2N3qPSTTeFTQlHJYX4Vc00v feCowgXn0S1S1RTGN0c6AcZ0JHL+j4pb5S+4P+LW6aF2Yc5mYQnsQZ2CjUyNhqjg dngu9NeqlNBsGy02XbhQ4DXKqX8hBcjDDvhQtRIObAVGBWSdU6dCFrqF9/SDZmSK Oeszr+WqcqxiTEj5BdhXq4pXniif5JjILV4mCHlZ2s9xN6v0cY+J4tBSpuqeTKQA wRAOBm48EG2P6HBi8lH+zDXu7O63ALfo5wt7uuKLm3CJ+nh8QPVgj6jfkIJZZm/J 1hgZmp5BZ8KK3jn6pNFf/0X9PtT6US1p363BAQsAKV0RjHsaUUBy3ACjdVkSoY3v Qt8vobItW/nEbCuubbNIRUc6vWrRSaAy+WbG/zDp6nRfWeuiq4icRpVEB4IqHetR wvmxbQScxIgjDma77SfqNXkcWMWsCIRoqebNrJ+9GAIuVKdS5NuYGV5wQ4oCjXjb 4B3iHVYZ9LDarJ1Ftt0rnmbHzeW7R8YFuK/UXCkWg0oU3IiLX9viqrYo4EVkDCBg DZeuh3XhRWBHGA1Xtc0XfN1oNLMF+/If/sKnnsSM+05WuxdOgZeDeLoZHvlIJK1B oJ9Aj4lDrgUofhXjBKz1 =iNY6 -----END PGP SIGNATURE-----