Re: SourceForge seems to add adware to software (windows installer)

[Tatsuro M. <tma...@ya...>]

----- Original Message -----
> From: sfeam 
> To: gnuplot-beta Tatsuro MATSUOKA
> Cc: 
> Date: 2015/6/16, Tue 15:18
> Subject: Re: SourceForge seems to add adware to software (windows installer)
> 
> On Tuesday, 16 June 2015 09:54:23 AM Tatsuro MATSUOKA wrote:
>>  Hello
>> 
>>  SourceForge seems to add adware to software (windows installer).
>> 
>> 
>>  Gimp project is an example.
>> 
>> 
> http://arstechnica.com/information-technology/2015/05/sourceforge-grabs-gimp-for-windows-account-wraps-installer-in-bundle-pushing-adware/
>> 
>> 
> http://www.infoworld.com/article/2929732/open-source-software/sourceforge-commits-reputational-suicide.html
>> 
>>  http://www.engadget.com/2015/05/29/gimp-sourceforge-fight/
>> 
>>  Octave community has started discussions.
>>   
> http://octave.1599824.n4.nabble.com/Sourceforge-adding-adware-to-software-will-we-be-moving-to-github-td4670950.html
>>   
> http://octave.1599824.n4.nabble.com/We-need-to-talk-about-SourceForge-td4670942.html
>> 
>> 
>>  However, the problem seems only to be happened only on windows installer.
> 
> More information and discussion here:
> 
>   http://lwn.net/Articles/646118/
> 
Thank you for your information. 
I have gotten to know what happened in the Gimp Project in more details.



>>  I do not think that the gnuplot project should escape SourceForge at this 
> moment but 
>>  we have to start to consider what should we do when our windows installers 
> will be affected by adwares.
> 


> In the case of the Gimp project, the project had *already left* SourceForge.
> The Gimp developers themselves were no longer placing any files on SourceForge.
> The offending installers were placed in the former (no longer in use) 
> project page on SourceForge.  
> 
> Anyhow, I have added md5 checksums for the gnuplot windows installer binaries
> on the download page.   Anyone worried about authenticity should confirm
> the checksum values before running the installer.
> 


It is a good idea to add md5 checksums.

(I have been providing md5 checksums for my own binaries of cvs version gnuplot for windows on my  distribution site.)

Tatsuro