4 ms·

It sounds more like a SourceForge issue than FileZilla. SourceForge used to provide clean binaries, but I guess they changed that process in the past year or tw

It sounds more like a SourceForge issue than FileZilla. SourceForge used to provide clean binaries, but I guess they changed that process in the past year or two to bundle apps in the installer wrapper. You need to be extremely careful during the installation process to make sure that you do not accidentally install some extra software. The same happen to uTorrent - they also added tricky question during the install process to include advertisement, change default browser and such. That's a sad way to earn money - the end-users will definitely move on because of that.

pc86 12y ago
Unfortunately it must work because people keep doing it. If it didn't increase revenue companies would stop doing it. It's the same with those timed modal windows on blogs. They piss a lot of people off. But they also increase email capture rates, and sites with large audiences usually see revenue increase as a result.
- geekamongus 12y ago
  > Unfortunately it must work because people keep doing it. If it didn't increase revenue companies would stop doing it. Unless it's a desperate attempt at saving a sinking ship.
  - TazeTSchnitzel 12y ago
    If SourceForge want to stay afloat, they should reinvent themselves as a decent GitHub alternative or pivot. Bundling malware for kickbacks and keeping the old site design won't take them anywhere good.
Cthulhu_ 12y ago
FileZilla could choose to move away from SourceForge, to be honest - any party staying with SF after stunts like this (and this isn't the first one) are as corrupt as SF themselves are IMO
- par0xyzm 12y ago
  http://gonullyourself.org/ezines/exp/exp02.txt http://gonullyourself.org/ezines/exp/exp02.txt Ctrl+F for ettercap for a rant about Sourceforge and security, written by blackhats
- panzi 12y ago
  > [...] are as corrupt as SF themselves [...] Or they are just dangerously lazy.
- JetSpiegel 12y ago
  par0xyzm is hellbanned, but this is interesting: http://gonullyourself.org/ezines/exp/exp02.txt http://gonullyourself.org/ezines/exp/exp02.txt is hosted at Sourceforge, so they share a server with thousands of other customers. Every single customer is able to execute commands and access the other project directories. Pretty stupid, eh? You only need to find one hole in one hosted site and you can access ALL the project databases

pc86 12y ago

Unfortunately it must work because people keep doing it. If it didn't increase revenue companies would stop doing it. It's the same with those timed modal windows on blogs. They piss a lot of people off. But they also increase email capture rates, and sites with large audiences usually see revenue increase as a result.

geekamongus 12y ago
> Unfortunately it must work because people keep doing it. If it didn't increase revenue companies would stop doing it. Unless it's a desperate attempt at saving a sinking ship.
- TazeTSchnitzel 12y ago
  If SourceForge want to stay afloat, they should reinvent themselves as a decent GitHub alternative or pivot. Bundling malware for kickbacks and keeping the old site design won't take them anywhere good.

Cthulhu_ 12y ago

FileZilla could choose to move away from SourceForge, to be honest - any party staying with SF after stunts like this (and this isn't the first one) are as corrupt as SF themselves are IMO

par0xyzm 12y ago
http://gonullyourself.org/ezines/exp/exp02.txt http://gonullyourself.org/ezines/exp/exp02.txt Ctrl+F for ettercap for a rant about Sourceforge and security, written by blackhats
panzi 12y ago
> [...] are as corrupt as SF themselves [...] Or they are just dangerously lazy.
JetSpiegel 12y ago
par0xyzm is hellbanned, but this is interesting: http://gonullyourself.org/ezines/exp/exp02.txt http://gonullyourself.org/ezines/exp/exp02.txt is hosted at Sourceforge, so they share a server with thousands of other customers. Every single customer is able to execute commands and access the other project directories. Pretty stupid, eh? You only need to find one hole in one hosted site and you can access ALL the project databases