Re: SourceForge nmap project analysis

["Fabio Pietrosanti (naif) - lists" <lists () infosecurity ch>]

To me it seems that reactions has been sometime exaggerated, sometime
misunderstood, especially regarding a supposed malicious approach of SF.

SF has now created a Community Panel and Community Voice forum to deal
with such issues:
https://sourceforge.net/blog/project-mirroring-policies-will-be-revisited-with-our-community-panel-existing-mirrors-removed/

Given that SF is for the opensource community, and it's not softpedia or
download.com or other pseudo-malware-oriented commercial sites, i think
their approach is very positive and the community reaction should try to
keep an ongoing discussion at
http://sourceforge.net/p/forge/discussion/communityvoice/ .

That community oriented approach is what i like most in the way they are
handling those concerns!

Fabio

On 6/19/15 12:38 PM, Arturo 'Buanzo' Busleiman wrote:
> Happy to hear that, F.
>
> As member of the Audacity(R) Team, this provides us with some hope.
>
> Go Nmap!!
>
> On 19 Jun 2015 02:15, "Fyodor" <fyodor () nmap org
> <mailto:fyodor () nmap org>> wrote:
>
>     Hi folks.  I'm happy to report that Sourceforge has removed their
>     fake Nmap page and now just redirects people straight to the
>     official Nmap page:
>
>     http://sourceforge.net/projects/nmap.mirror/
>
>     Even though I'm still very disappointed in Sourceforge for abusing
>     the trust of their users by adding malware to open source packages
>     (and also tricking them with malware-laden fake download buttons),
>     I'm glad they did the right thing by removing the fake Nmap page. 
>     Hopefully they will do so for any other projects which request it as
>     well.  And I'm also hoping that this time they stick to their
>     promises to stop adding "offers" to 3rd party installers without
>     consent,  and to cease showing the malware-laden
>     fake-download-button ads.
>
>     Cheers,
>     Fyodor
>
>
>     _______________________________________________
>     Sent through the dev mailing list
>     https://nmap.org/mailman/listinfo/dev
>     Archived at http://seclists.org/nmap-dev/

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/