Stories
Slash Boxes
Comments

SoylentNews is people

posted by janrinok on Thursday May 28 2015, @03:12PM   Printer-friendly
from the this-is-not-the-host-you-are-looking-for... dept.

Google, or someone using their hosting service, noted that SourceForge had established a mirror to the official GIMP-for-Windows site and were now offering downloads which contained adware:

It appears that +SourceForge took over the control of the 'GIMP for Windows' account and is now distributing an ads-enabled installer of GIMP. They also locked out original owner of the account, Jernej Simončič, who has been building the Windows versions of GIMP for our project for years.

So far they haven't replied to provide explanations. Therefore, we remind you again that GIMP only provides builds for Windows via its official Downloads page.

SourceForge's mirrored sites facility is described thus:

The Open Source Mirror Directory is an extension to our existing software directory, where we'll be mirroring projects that are not hosted on SourceForge, and SourceForge projects that have been abandoned.

The problem, though, is that GIMP-for-Windows is not an abandoned project, but moved from SourceForge to Google because the writers "had concerns about the presence of misleading third-party ads on SourceForge".

SourceForge has responded, acknowledging that Gimp-Win had abandoned SourceForge due to misleading ads and claim "They were not alone in those concerns — we were also concerned — leading us to establish a program to enable users and developers to help us remove misleading and confusing ads." They also admit "Mirrored projects are sometimes used to deliver easy-to-decline third-party offers..." which suggests that they have merely changed the way that they deliver their ads - but not necessarily the ad's content. So, some might say, they've rectified the situation by providing both misleading ads and misleading hosting.

SourceForge also say "Since our change to mirror GIMP-Win, we have received no requests by the original author to resume use of this project. We welcome further discussion about how SourceForge can best serve the GIMP-Win author." Perhaps letting the writer choose where he hosts his project would be a good place to start.

Sourceforge hijacks GIMP For Windows project, adds malware to downloads

SourceForge (SF) has taken over control of the GIMP for Windows SF project and is now distributing an adware/malwared installer for GIMP. They also locked out the maintainer, Jernej Simončiči. Sourceforge claims it was "abandoned" and they're providing a service by "mirroring" the original, though it's unclear how much value malware adds for the end user, rather than for SF. (This comes two years after SF claiming its malware was just "misunderstood".)

Since being busted, SF is now serving an .exe that matches that at the official download site.

Other projects recently hijacked by SF include many Apache projects (Allura, Derby, Directory Studio, the Apache HTTP server, Hadoop, OpenOffice, Solr, and Subversion); Mozilla Firefox, Thunderbird, and FireFTP; Evolution and Open-Xchange; Drupal and WordPress; Eclipse, Aptana, Komodo, MonoDevelop, and NetBeans; VLC, Audacious, Banshee.fm, Helix, and Tomahawk media players; and many others.


[Editor's Comment: First Submission and 2nd Submission. Submissions significantly edited before publication]

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 5, Informative) by ikanreed on Thursday May 28 2015, @03:33PM

    by ikanreed (3164) Subscriber Badge on Thursday May 28 2015, @03:33PM (#189131) Journal

    Yes, this shit started "optional" shortly after Dice bought them. Then every decent project fled sourceforge. Now they've recognized their imminent death and are trying to squeeze a few extra dimes out of everyone elses' good name.

    Which is why they need to lose a colossal amount of money and just properly die.

    Starting Score:    1  point
    Moderation   +4  
       Insightful=1, Informative=3, Total=4
    Extra 'Informative' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   5  
  • (Score: 2) by JeanCroix on Thursday May 28 2015, @03:57PM

    by JeanCroix (573) on Thursday May 28 2015, @03:57PM (#189144)
    ..just hoping they don't go full SCO in the process. Never go full SCO.
    • (Score: 4, Funny) by bob_super on Thursday May 28 2015, @04:14PM

      by bob_super (1357) on Thursday May 28 2015, @04:14PM (#189153)

      Does your mommy know that you type bad words on the internet? Another S-word from you, and someone will wash your keyboard with soap!

      • (Score: 0) by Anonymous Coward on Thursday May 28 2015, @04:25PM

        by Anonymous Coward on Thursday May 28 2015, @04:25PM (#189161)

        and someone will wash your keyboard with soap!

        Can they do that the next time my cat pees on my keyboard? She really does hate that thing.

        • (Score: 5, Touché) by tibman on Thursday May 28 2015, @04:46PM

          by tibman (134) Subscriber Badge on Thursday May 28 2015, @04:46PM (#189170)

          She's jealous that you spend all day petting that instead of her.

          --
          SN won't survive on lurkers alone. Write comments.
        • (Score: 0) by Anonymous Coward on Wednesday June 03 2015, @03:34AM

          by Anonymous Coward on Wednesday June 03 2015, @03:34AM (#191420)

          As far as I know cats pee to claim ownership. It's the same thing as dogs but more direct. Maybe it likes the feeling of walking on the keyboard?

          If a cat pees on you it thinks you're awesome!

      • (Score: 2, Funny) by Anonymous Coward on Thursday May 28 2015, @04:38PM

        by Anonymous Coward on Thursday May 28 2015, @04:38PM (#189165)

        So I get a free keyboard cleaning by just writing "SCO" here? Or do I have to add "SystemD"? If needed, I also can add "Slashdot."

        Wait, my keyboard still is dirty! "SAP"? "Sony"? What's missing?

        • (Score: 1) by KGIII on Thursday May 28 2015, @06:39PM

          by KGIII (5261) on Thursday May 28 2015, @06:39PM (#189246) Journal

          The missing component is Microsoft. You can abbreviate it by typing, "M$."

          --
          "So long and thanks for all the fish."
      • (Score: 1) by nitehawk214 on Thursday May 28 2015, @07:31PM

        by nitehawk214 (1304) on Thursday May 28 2015, @07:31PM (#189268)

        Have you seen how often he eats Dortios at the keyboard? It probably needs to be washed with soap!

        --
        "Don't you ever miss the days when you used to be nostalgic?" -Loiosh
    • (Score: 2) by FatPhil on Thursday May 28 2015, @04:23PM

      by FatPhil (863) <reversethis-{if.fdsa} {ta} {tnelyos-cp}> on Thursday May 28 2015, @04:23PM (#189160) Homepage
      Tom Cruise, Santa Cruz, what's in a name?
      --
      Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves
    • (Score: 2) by frojack on Thursday May 28 2015, @05:25PM

      by frojack (1554) on Thursday May 28 2015, @05:25PM (#189198) Journal

      ..just hoping they don't go full SCO in the process. Never go full SCO.

      I'm actually hoping they do.
      After all, there is enough free legal advice posted on slashdot every day to keep DICE in court for decades. Better there than on the interwebs.

      --
      No, you are mistaken. I've always had this sig.
  • (Score: 3, Insightful) by kaszz on Thursday May 28 2015, @11:32PM

    by kaszz (4211) on Thursday May 28 2015, @11:32PM (#189395) Journal

    Is that same Dice that wrecked some tech blog? ;-)

    Great, now we know they can't be trusted.. EVER. Congratulations Dice, trust is hereby revoked permanently.