2 ms·
On another note, Sourceforge just removes the malware flag, but did they actually check anything or just went with the provided explanation without any concrete
by archon810 2y ago
On another note, Sourceforge just removes the malware flag, but did they actually check anything or just went with the provided explanation without any concrete details? If I hijacked some software and got caught, I'd act nonchalantly like this as well and hope it'll blow over without anyone noticing.
- loeg 2y agoAs far as I know, they didn't check anything. (And neither have I -- no comment on whether this is an AV true positive or false positive.) Here's VirusTotal on the tarball (note Chrome blocks its download, for the same reason): https://www.virustotal.com/gui/file/c08e2ba0049307017bf9d8a63dd2a0dfb96aa0cdeb34ae007776e63eba62a26f https://www.virustotal.com/gui/file/c08e2ba0049307017bf9d8a6... Nimda was a Windows malware from 2001. It seems unlikely that would be a meaningful attack vector for a compromised privoxy in 2025. But again, I have not investigated it.