Menu
▾
▴
gnuplot-beta
|
From: Tatsuro M. <tma...@ya...> - 2015-06-16 00:54:32
|
Hello SourceForge seems to add adware to software (windows installer). Gimp project is an example. http://arstechnica.com/information-technology/2015/05/sourceforge-grabs-gimp-for-windows-account-wraps-installer-in-bundle-pushing-adware/ http://www.infoworld.com/article/2929732/open-source-software/sourceforge-commits-reputational-suicide.html http://www.engadget.com/2015/05/29/gimp-sourceforge-fight/ Octave community has started discussions. http://octave.1599824.n4.nabble.com/Sourceforge-adding-adware-to-software-will-we-be-moving-to-github-td4670950.html http://octave.1599824.n4.nabble.com/We-need-to-talk-about-SourceForge-td4670942.html However, the problem seems only to be happened only on windows installer. Fortunately, the phenomena seem not to be observed on gnuplot windows binary installers. The gnuplot windows binary installers are produced by Inno setup dislike other projects. It is possible that the selection of Inno setup gives happy a result at this moment. I do not think that the gnuplot project should escape SourceForge at this moment but we have to start to consider what should we do when our windows installers will be affected by adwares. Tatsuro |
|
From: sfeam <sf...@us...> - 2015-06-16 06:20:10
|
On Tuesday, 16 June 2015 09:54:23 AM Tatsuro MATSUOKA wrote: > Hello > > SourceForge seems to add adware to software (windows installer). > > > Gimp project is an example. > > http://arstechnica.com/information-technology/2015/05/sourceforge-grabs-gimp-for-windows-account-wraps-installer-in-bundle-pushing-adware/ > > http://www.infoworld.com/article/2929732/open-source-software/sourceforge-commits-reputational-suicide.html > > http://www.engadget.com/2015/05/29/gimp-sourceforge-fight/ > > Octave community has started discussions. > http://octave.1599824.n4.nabble.com/Sourceforge-adding-adware-to-software-will-we-be-moving-to-github-td4670950.html > http://octave.1599824.n4.nabble.com/We-need-to-talk-about-SourceForge-td4670942.html > > > However, the problem seems only to be happened only on windows installer. More information and discussion here: http://lwn.net/Articles/646118/ > Fortunately, the phenomena seem not to be observed on gnuplot windows binary installers. > > The gnuplot windows binary installers are produced by Inno setup dislike other projects. > It is possible that the selection of Inno setup gives happy a result at this moment. > > > I do not think that the gnuplot project should escape SourceForge at this moment but > we have to start to consider what should we do when our windows installers will be affected by adwares. In the case of the Gimp project, the project had *already left* SourceForge. The Gimp developers themselves were no longer placing any files on SourceForge. The offending installers were placed in the former (no longer in use) project page on SourceForge. Anyhow, I have added md5 checksums for the gnuplot windows installer binaries on the download page. Anyone worried about authenticity should confirm the checksum values before running the installer. Ethan |
|
From: Tatsuro M. <tma...@ya...> - 2015-06-16 06:42:29
|
----- Original Message ----- > From: sfeam > To: gnuplot-beta Tatsuro MATSUOKA > Cc: > Date: 2015/6/16, Tue 15:18 > Subject: Re: SourceForge seems to add adware to software (windows installer) > > On Tuesday, 16 June 2015 09:54:23 AM Tatsuro MATSUOKA wrote: >> Hello >> >> SourceForge seems to add adware to software (windows installer). >> >> >> Gimp project is an example. >> >> > http://arstechnica.com/information-technology/2015/05/sourceforge-grabs-gimp-for-windows-account-wraps-installer-in-bundle-pushing-adware/ >> >> > http://www.infoworld.com/article/2929732/open-source-software/sourceforge-commits-reputational-suicide.html >> >> http://www.engadget.com/2015/05/29/gimp-sourceforge-fight/ >> >> Octave community has started discussions. >> > http://octave.1599824.n4.nabble.com/Sourceforge-adding-adware-to-software-will-we-be-moving-to-github-td4670950.html >> > http://octave.1599824.n4.nabble.com/We-need-to-talk-about-SourceForge-td4670942.html >> >> >> However, the problem seems only to be happened only on windows installer. > > More information and discussion here: > > http://lwn.net/Articles/646118/ > Thank you for your information. I have gotten to know what happened in the Gimp Project in more details. >> I do not think that the gnuplot project should escape SourceForge at this > moment but >> we have to start to consider what should we do when our windows installers > will be affected by adwares. > > In the case of the Gimp project, the project had *already left* SourceForge. > The Gimp developers themselves were no longer placing any files on SourceForge. > The offending installers were placed in the former (no longer in use) > project page on SourceForge. > > Anyhow, I have added md5 checksums for the gnuplot windows installer binaries > on the download page. Anyone worried about authenticity should confirm > the checksum values before running the installer. > It is a good idea to add md5 checksums. (I have been providing md5 checksums for my own binaries of cvs version gnuplot for windows on my distribution site.) Tatsuro |
|
From: Lars H. <lhe...@us...> - 2015-06-16 09:14:55
|
> It is a good idea to add md5 checksums. > > (I have been providing md5 checksums for my own binaries of cvs version gnuplot for windows on my ??distribution site.) I used to sign releases with my gpg key. Maybe the creation of a signing key would not be such a bad idea. |
|
From: Clark G. <cla...@fa...> - 2015-06-16 09:43:37
|
Signing is definitely a good idea.
If you guys want to move away from sf, I'm willing to facilitate as needed. At one time we hosted everything at Virginia Tech (I think the primary v6 location might actually still be here - sf's IPv6 routing was frequently broken when I set this up).
Likewise, we can always separate the canonical gnuplot.info distribution location from wherever we manage code (part of the reason we shouldn't publicize the SourceForge links directly even when is hosted there). Github is clearly a good option for code repository; bitbucket is also quite good.
So far it sounds like there's not a lot of groundswell for moving, but let me know. Worth considering, imho.
Regards
Clark
--
Clark Gaylord
cla...@fa...
... thumbed on Android
auto-correct may have improved this message ...
On Jun 16, 2015 4:48 AM, Lars Hecking <lhe...@us...> wrote:
>
>
> > It is a good idea to add md5 checksums.
> >
> > (I have been providing md5 checksums for my own binaries of cvs version gnuplot for windows on my ??distribution site.)
>
> I used to sign releases with my gpg key. Maybe the creation of a signing key
> would not be such a bad idea.
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> gnuplot-beta mailing list
> gnu...@li...
> Membership management via: https://lists.sourceforge.net/lists/listinfo/gnuplot-beta
|
|
From: Tatsuro M. <tma...@ya...> - 2015-06-17 00:50:53
|
----- Original Message ----- > From: sfeam > To: gnuplot-beta Tatsuro MATSUOKA > Cc: > Date: 2015/6/16, Tue 15:18 > Subject: Re: SourceForge seems to add adware to software (windows installer) > Anyhow, I have added md5 checksums for the gnuplot windows installer binaries > on the download page. Anyone worried about authenticity should confirm > the checksum values before running the installer. > > Ethan This is information: Usual windows users are not familiar with checksum. Please see: https://en.wikipedia.org/wiki/Checksum On windows, Checksum software is not installed by default. (I have been used "md5sum" on msys or cygwin.) A command line tool "File Checksum Integrity Verifier" fciv.exe can be downloaded from Microsoft site https://www.microsoft.com/en-us/download/details.aspx?id=11533 GUI based Checksum software working on windows can be found on the web. (There are many softwares for this purpose so that I cannot recommend which is the best.) Tatsuro |
|
From: Tatsuro M. <tma...@ya...> - 2015-06-17 10:09:30
|
I have investigated how the source code hosting services are different. Perhaps many people know the below but I myself found this today. As information for those who are not familiar to the below (including me) Comparison of source code hosting facilities https://en.wikipedia.org/wiki/Comparison_of_source_code_hosting_facilities Tatsuro |
|
From: <pl...@pi...> - 2015-06-17 10:52:48
|
On 17/06/15 02:50, Tatsuro MATSUOKA wrote: > ----- Original Message ----- > >> From: sfeam >> To: gnuplot-beta Tatsuro MATSUOKA >> Cc: >> Date: 2015/6/16, Tue 15:18 >> Subject: Re: SourceForge seems to add adware to software (windows installer) > >> Anyhow, I have added md5 checksums for the gnuplot windows installer binaries >> on the download page. Anyone worried about authenticity should confirm >> the checksum values before running the installer. >> >> Ethan > > > This is information: > Usual windows users are not familiar with checksum. > Please see: > > https://en.wikipedia.org/wiki/Checksum > > > > On windows, Checksum software is not installed by default. > (I have been used "md5sum" on msys or cygwin.) > > A command line tool "File Checksum Integrity Verifier" fciv.exe can be downloaded from > Microsoft site > https://www.microsoft.com/en-us/download/details.aspx?id=11533 > > > GUI based Checksum software working on windows can be found on the web. > (There are many softwares for this purpose so that I cannot recommend which is the best.) > > Tatsuro > Most lambda Windoze users don't even know what a command line is , let alone a checksum. It's just click, click. double click; say OK to some EULA they never read then reboot Windoze. Adding checksum information is probably a good step anyway, though. Since SF's dishonest behaviour is motivated by creating a revenue source, it would seem that gnuplot will not be likely target, at least until they do this kind of crap to every download on their site, which I suppose is the logical conclusion. Initially they will target only large circulation packages like GIMP. Gnuplot is fairly specialised and requires a fair degree of technical competence and has a fairly studious learning curve. Those wanting banal graph plotting capabilities will use Exce. However, since SF is clearly becoming unreliable and dishonest, it may be worth looking for an exit plan before it becomes a pressing problem, possibly with added constraints which do not currently exist. It seems like it should be treated like shutting down a FaceBook account: you never say you want to close it but remove everything and retain your log-in rather than relinquishing access. In the case of SF update the readme every month or so, so as not to have it picked up as 'dormant' and re-appropriated. Removing any references to SF as a download source will wither the traffic and make it progressively less and less attractive as an adware revenue source Presenting this kind of thing as a "mirror" which is supposed to *reflect* exactly the same content as the source is again dishonest . Hopefully someone like Mozilla, who have the resources will sue their butt and get this practice stopped. Peter. |
|
From: Ethan A M. <merritt@u.washington.edu> - 2015-06-18 21:44:54
|
On Tuesday, 16 June, 2015 09:54:23 Tatsuro MATSUOKA wrote: > Hello > > SourceForge seems to add adware to software (windows installer). Today's installment. Have your popcorn handy. http://sourceforge.net/blog/project-mirroring-policies-will-be-revisited-with-our-community-panel-existing-mirrors-removed/ Ethan > > > Gimp project is an example. > > http://arstechnica.com/information-technology/2015/05/sourceforge-grabs-gimp-for-windows-account-wraps-installer-in-bundle-pushing-adware/ > > http://www.infoworld.com/article/2929732/open-source-software/sourceforge-commits-reputational-suicide.html > > http://www.engadget.com/2015/05/29/gimp-sourceforge-fight/ > > Octave community has started discussions. > http://octave.1599824.n4.nabble.com/Sourceforge-adding-adware-to-software-will-we-be-moving-to-github-td4670950.html > http://octave.1599824.n4.nabble.com/We-need-to-talk-about-SourceForge-td4670942.html > > > However, the problem seems only to be happened only on windows installer. > > Fortunately, the phenomena seem not to be observed on gnuplot windows binary installers. > > The gnuplot windows binary installers are produced by Inno setup dislike other projects. > It is possible that the selection of Inno setup gives happy a result at this moment. > > > I do not think that the gnuplot project should escape SourceForge at this moment but > we have to start to consider what should we do when our windows installers will be affected by adwares. > > Tatsuro > > ------------------------------------------------------------------------------ > _______________________________________________ > gnuplot-beta mailing list > gnu...@li... > Membership management via: https://lists.sourceforge.net/lists/listinfo/gnuplot-beta -- Ethan A Merritt Biomolecular Structure Center, K-428 Health Sciences Bldg MS 357742, University of Washington, Seattle 98195-7742 |
|
From: Allin C. <cot...@wf...> - 2015-06-19 10:23:09
|
On Thu, 18 Jun 2015, Ethan A Merritt wrote: > On Tuesday, 16 June, 2015 09:54:23 Tatsuro MATSUOKA wrote: >> Hello >> >> SourceForge seems to add adware to software (windows installer). > > Today's installment. > Have your popcorn handy. > > > http://sourceforge.net/blog/project-mirroring-policies-will-be-revisited-with-our-community-panel-existing-mirrors-removed/ That text looks quite satisfactory to me. It does seem that SF's practice with GIMP was seriously wrong, but I'm prepared to take their retraction of that policy at face value until proved otherwise. Allin Cottrell |
|
From: Tatsuro M. <tma...@ya...> - 2015-06-19 00:10:04
|
----- Original Message ----- >From: Ethan A Merritt >To: gnuplot-beta Tatsuro MATSUOKA >Date: 2015/6/19, Fri 06:20 >Subject: Re: SourceForge seems to add adware to software (windows installer) > > > >On Tuesday, 16 June, 2015 09:54:23 Tatsuro MATSUOKA wrote: >> Hello >> >> SourceForge seems to add adware to software (windows installer). > >Today's installment. >Have your popcorn handy. > > >http://sourceforge.net/blog/project-mirroring-policies-will-be-revisited-with-our-community-panel-existing-mirrors-removed/ > > >Ethan Thank you for your information. Unfortunately I could not get popcorn. I have read it with drinking coffee. Tatsuro |
|
From: Tatsuro M. <tma...@ya...> - 2016-02-11 22:23:42
|
Hello On the Octave ML, there reported a news concerning to SourceForge. The new owners seem to start to eliminate mistakes from the past. Octave ML report: http://octave.1599824.n4.nabble.com/We-need-to-talk-about-SourceForge-tp4670942p4674746.html SourceForge announce: https://sourceforge.net/blog/sourceforge-acquisition-and-future-plans/ Tatsuro |
