4 ms·

Notepad++ leaves SourceForge

136 points by nreece 11y ago

el_duderino 11y ago
At least he didn't put out another update that opens a new tab and starts typing out more of his thoughts automatically.
- voltagex_ 11y ago
  Do you remember which release this was?
  - plorkyeran 11y ago
    https://notepad-plus-plus.org/news/notepad-6.7.4-je-suis-charlie-edition.html https://notepad-plus-plus.org/news/notepad-6.7.4-je-suis-cha...
    - voltagex_ 11y ago
      Doesn't look like it was too bad of a way to add an "easter egg" - https://github.com/notepad-plus-plus/notepad-plus-plus/commit/00f664188f844d0c58f8c73a9c7b7e89ae72b41e#diff-7d3fc7e5f1b5493bc1d4b60d89689354R216 https://github.com/notepad-plus-plus/notepad-plus-plus/commi...
stevebmark 11y ago
There are still major projects hosted on SourceForge?!
- LukeShu 11y ago
  - hunspell (one of the major spell-check engines, used by Firefox, LibreOffice, et cetera) - Mesa3d - Many Linux-kernel utilities (e2fsprogs, procps-ng (ps, top, uptime, watch, ...), fuse, jfs, sysfsutil, net-tools, NFS, acpiclient/acpid, et cetera) - PCRE - Flex (the lexical analyzer generator) - TCL (the language) - Many lower-level media libraries (freetype, liba52, libmpeg2, libmtp, libwpd, libpwg, opencore-amr, giflib, libcddb, libebook, libexif, et cetera)
  - oxplot 11y ago
    A lot of what you've listed either ships along with other software as libraries on platforms like Windows and Mac and/or ship as part of linux distos. Hence SF would not benefit spending time infecting these and as a consequence, the owners have little reason to move away from SF.
    - LukeShu 11y ago
      That is absolutely true, I had the same thought. I should add that my list was biased away from Windows applications, as I made the list by summarizing the output of: pacman -Qi|grep ^URL|grep -i -e '\bsf\.net' -e sourceforge|sort -u
- mnl 11y ago
  Besides Notepad++, I have in this box Pidgin, KeePass, DjVuLibre/WinDjView, DOSBox, Freeplane, TeXnicCenter, NAPS2, WikidPad, WinMerge, REDUCE (great CAS), JaxoDraw, MinGW/MSYS, NumPy/SciPy (Windows binaries are there...) and quite a few more. I don't think REDUCE and JaxoDraw are going anywhere soon. Same for the WP 31S/34S calculator projects. Maxima and matplotlib are there as well. I really need some of these, so for me blocking SourceForge is not an option even at this moment. It just isn't as easy as the vibe here makes it. I'm just as careful as you should when downloading Windows installers. Block most of the JS there, scan the files, always go for custom setups and when in doubt use sandboxing.
- whoopdedo 11y ago
  mingw, mingw-w64, and msys2 are still there. Kind of a big deal because their package managers use SF mirrors.
  - RayDonnelly 11y ago
    MSYS2 packages are signed by Alexey Pavlov. Pacman won't install unsigned ones by default.
jotux 11y ago
They moved to github(https://github.com/notepad-plus-plus/notepad-plus-plus https://github.com/notepad-plus-plus/notepad-plus-plus). It wasn't obvious from the link.
- rtpg 11y ago
  It seems they moved to github for development a while back (May), but have moved binary downloads away from SF now.
ksec 11y ago
I have always thought this is something Github could capture on. GitHub is missing download of Compiled Binary, and some forum for user ( not developers ) interaction. But then Github has always been a Dev focus site. How will Notepad++ handle the delivery?
- jotux 11y ago
  They serve directly from their site now: https://notepad-plus-plus.org/download/v6.7.9.html https://notepad-plus-plus.org/download/v6.7.9.html
- beefsack 11y ago
  GitHub does handle binaries, available through the "releases" link on the repo navigation bar. Developers can relate releases to tags and upload binaries. https://github.com/beefsack/git-mirror/releases https://github.com/beefsack/git-mirror/releases
  - zyxley 11y ago
    You can also potentially wire this up to CI services, to automatically build and deploy a release binary for every new commit on a given branch.
    - bhuga 11y ago
      Some popular GitHub CI integrators already do this: http://docs.travis-ci.com/user/deployment/releases/ http://docs.travis-ci.com/user/deployment/releases/ http://www.appveyor.com/docs/deployment/github http://www.appveyor.com/docs/deployment/github
- cliffwarden 11y ago
  Github does have "releases" that allow you to attach binaries
- tauchunfall 11y ago
  >GitHub is missing download of Compiled Binary You can create releases from tags and upload artifacts for every release. GitHub have had a download tab for compiled binaries years ago. edit: typo
dan-silver 11y ago
Looks like the SourceForge n++ page is still there(http://sourceforge.net/projects/notepad-plus/ http://sourceforge.net/projects/notepad-plus/), but downloads have been removed. I find it interesting that they're directing people to their github page and not their website. Considering that users are going to sourceforge to download the application, not build it from source.
- iancarroll 11y ago
  https://github.com/notepad-plus-plus/notepad-plus-plus/releases https://github.com/notepad-plus-plus/notepad-plus-plus/relea...
  - dan-silver 11y ago
    All I see under the title "Notepad++ 6.7.9 release" is a direct link to download the source code and a link to download the binaries from their site. It seems like they should be directly linking to their website from the sourceforge page.
ChuckMcM 11y ago
I find the rapidly increasing collapse of the 'monetize downloads' business model quite refreshing. I hope Github has enough revenue to not have to revert to things like this in the future.
- bdcravens 11y ago
  I imagine so. I don't think SourceForge's commercial offerings ever had much wind behind them, but pretty much every company I've done any kind of work for in recent years has a commercial GitHub account.
  - imroot 11y ago
    Sourceforge sold their commercial offerings (SFEE) to CollabNet in 2007...and they haven't directly competed in that space since.
- yuhong 11y ago
  I am thinking Yahoo! should buy them for this reason.
- davidgerard 11y ago
  I work for a company that uses paid Github, and it's the BEST THING EVER. We will be happy to keep throwing money at Github well into the future. We just outgrew the "platinum" plan ($200/mo), but they have plans all the way up to "aluminium" (with an I) (just over $1000/mo). They don't suck and we're enormously happy. As the sysadmin whose job it would otherwise be to manage Gitorious or Gitlab locally, I am delighted to be able to outsource this task. So yeah, I'm extrapolating from anecdote but for the moment I think their prospects of continued payment for services are pretty good.
jskz 11y ago
Doesn't SourceForge routinely inject malware into the little install bundle executables, too? Once upon a time, SourceForge was revered for its good will and the ripples it was making in the FOSS pond. Too bad the site they've become can't close down soon enough.
- davidgerard 11y ago
  It tends to make the download link the wrapper software, which installs the malware and downloads the actual software. This lets them supply e.g. unmodified Firefox binaries but still malware you.
datainplace 11y ago
Sourceforge is to Gamestop as Huffington Post is to Verizon. Hopefully the new ownership puts an end to the site. Though I expect they will sell it to an outside investor.
lewisl9029 11y ago
I also just found out today that Mumble has moved their binaries and source to Github as well (the update prompt for 1.2.9 pointed to the Github binary directly). Last time I checked, their download links all pointed to SourceForge. https://github.com/mumble-voip/mumble https://github.com/mumble-voip/mumble
anotherevan 11y ago
I think if I was any project leaving sourceforge, I would try and delete as much as possible, including the user account. Failing that, I would upload as the last release an "installer" that just gives notice that downloads through sourceforge are no longer supported due to their scammy behaviour, and a link of where to get the valid download.
ChrisArchitect 11y ago
so what's the deal with the 'injection'? They've been bundling crapware with the installers for a few years at least right? But for a long while there was always an option on the file list/downloads page that users in the know could click to get a clean installer 'direct download'. That appears removed now, is that what everyone is up in arms about?
- davidgerard 11y ago
  A couple of years ago they started using a malware wrapper, that installed adware then did the real download. Projects got very upset and they swore they wouldn't do this again, then offered profitsharing (which some projects took them up on, e.g. Filezilla). Then, two years after promising they would never do this again, they started doing it again.

136 points by nreece 11y ago

At least he didn't put out another update that opens a new tab and starts typing out more of his thoughts automatically.

voltagex_ 11y ago
Do you remember which release this was?
- plorkyeran 11y ago
  https://notepad-plus-plus.org/news/notepad-6.7.4-je-suis-charlie-edition.html https://notepad-plus-plus.org/news/notepad-6.7.4-je-suis-cha...
  - voltagex_ 11y ago
    Doesn't look like it was too bad of a way to add an "easter egg" - https://github.com/notepad-plus-plus/notepad-plus-plus/commit/00f664188f844d0c58f8c73a9c7b7e89ae72b41e#diff-7d3fc7e5f1b5493bc1d4b60d89689354R216 https://github.com/notepad-plus-plus/notepad-plus-plus/commi...

stevebmark 11y ago

There are still major projects hosted on SourceForge?!

LukeShu 11y ago
- hunspell (one of the major spell-check engines, used by Firefox, LibreOffice, et cetera) - Mesa3d - Many Linux-kernel utilities (e2fsprogs, procps-ng (ps, top, uptime, watch, ...), fuse, jfs, sysfsutil, net-tools, NFS, acpiclient/acpid, et cetera) - PCRE - Flex (the lexical analyzer generator) - TCL (the language) - Many lower-level media libraries (freetype, liba52, libmpeg2, libmtp, libwpd, libpwg, opencore-amr, giflib, libcddb, libebook, libexif, et cetera)
- oxplot 11y ago
  A lot of what you've listed either ships along with other software as libraries on platforms like Windows and Mac and/or ship as part of linux distos. Hence SF would not benefit spending time infecting these and as a consequence, the owners have little reason to move away from SF.
  - LukeShu 11y ago
    That is absolutely true, I had the same thought. I should add that my list was biased away from Windows applications, as I made the list by summarizing the output of: pacman -Qi|grep ^URL|grep -i -e '\bsf\.net' -e sourceforge|sort -u
mnl 11y ago
Besides Notepad++, I have in this box Pidgin, KeePass, DjVuLibre/WinDjView, DOSBox, Freeplane, TeXnicCenter, NAPS2, WikidPad, WinMerge, REDUCE (great CAS), JaxoDraw, MinGW/MSYS, NumPy/SciPy (Windows binaries are there...) and quite a few more. I don't think REDUCE and JaxoDraw are going anywhere soon. Same for the WP 31S/34S calculator projects. Maxima and matplotlib are there as well. I really need some of these, so for me blocking SourceForge is not an option even at this moment. It just isn't as easy as the vibe here makes it. I'm just as careful as you should when downloading Windows installers. Block most of the JS there, scan the files, always go for custom setups and when in doubt use sandboxing.
whoopdedo 11y ago
mingw, mingw-w64, and msys2 are still there. Kind of a big deal because their package managers use SF mirrors.
- RayDonnelly 11y ago
  MSYS2 packages are signed by Alexey Pavlov. Pacman won't install unsigned ones by default.

jotux 11y ago

They moved to github(https://github.com/notepad-plus-plus/notepad-plus-plus https://github.com/notepad-plus-plus/notepad-plus-plus). It wasn't obvious from the link.

rtpg 11y ago
It seems they moved to github for development a while back (May), but have moved binary downloads away from SF now.

ksec 11y ago

I have always thought this is something Github could capture on. GitHub is missing download of Compiled Binary, and some forum for user ( not developers ) interaction. But then Github has always been a Dev focus site. How will Notepad++ handle the delivery?

jotux 11y ago
They serve directly from their site now: https://notepad-plus-plus.org/download/v6.7.9.html https://notepad-plus-plus.org/download/v6.7.9.html
beefsack 11y ago
GitHub does handle binaries, available through the "releases" link on the repo navigation bar. Developers can relate releases to tags and upload binaries. https://github.com/beefsack/git-mirror/releases https://github.com/beefsack/git-mirror/releases
- zyxley 11y ago
  You can also potentially wire this up to CI services, to automatically build and deploy a release binary for every new commit on a given branch.
  - bhuga 11y ago
    Some popular GitHub CI integrators already do this: http://docs.travis-ci.com/user/deployment/releases/ http://docs.travis-ci.com/user/deployment/releases/ http://www.appveyor.com/docs/deployment/github http://www.appveyor.com/docs/deployment/github
cliffwarden 11y ago
Github does have "releases" that allow you to attach binaries
tauchunfall 11y ago
>GitHub is missing download of Compiled Binary You can create releases from tags and upload artifacts for every release. GitHub have had a download tab for compiled binaries years ago. edit: typo

dan-silver 11y ago

Looks like the SourceForge n++ page is still there(http://sourceforge.net/projects/notepad-plus/ http://sourceforge.net/projects/notepad-plus/), but downloads have been removed. I find it interesting that they're directing people to their github page and not their website. Considering that users are going to sourceforge to download the application, not build it from source.

iancarroll 11y ago
https://github.com/notepad-plus-plus/notepad-plus-plus/releases https://github.com/notepad-plus-plus/notepad-plus-plus/relea...
- dan-silver 11y ago
  All I see under the title "Notepad++ 6.7.9 release" is a direct link to download the source code and a link to download the binaries from their site. It seems like they should be directly linking to their website from the sourceforge page.

ChuckMcM 11y ago

I find the rapidly increasing collapse of the 'monetize downloads' business model quite refreshing. I hope Github has enough revenue to not have to revert to things like this in the future.

bdcravens 11y ago
I imagine so. I don't think SourceForge's commercial offerings ever had much wind behind them, but pretty much every company I've done any kind of work for in recent years has a commercial GitHub account.
- imroot 11y ago
  Sourceforge sold their commercial offerings (SFEE) to CollabNet in 2007...and they haven't directly competed in that space since.
yuhong 11y ago
I am thinking Yahoo! should buy them for this reason.
davidgerard 11y ago
I work for a company that uses paid Github, and it's the BEST THING EVER. We will be happy to keep throwing money at Github well into the future. We just outgrew the "platinum" plan ($200/mo), but they have plans all the way up to "aluminium" (with an I) (just over $1000/mo). They don't suck and we're enormously happy. As the sysadmin whose job it would otherwise be to manage Gitorious or Gitlab locally, I am delighted to be able to outsource this task. So yeah, I'm extrapolating from anecdote but for the moment I think their prospects of continued payment for services are pretty good.

jskz 11y ago

Doesn't SourceForge routinely inject malware into the little install bundle executables, too? Once upon a time, SourceForge was revered for its good will and the ripples it was making in the FOSS pond. Too bad the site they've become can't close down soon enough.

davidgerard 11y ago
It tends to make the download link the wrapper software, which installs the malware and downloads the actual software. This lets them supply e.g. unmodified Firefox binaries but still malware you.

datainplace 11y ago

Sourceforge is to Gamestop as Huffington Post is to Verizon. Hopefully the new ownership puts an end to the site. Though I expect they will sell it to an outside investor.

lewisl9029 11y ago

I also just found out today that Mumble has moved their binaries and source to Github as well (the update prompt for 1.2.9 pointed to the Github binary directly). Last time I checked, their download links all pointed to SourceForge. https://github.com/mumble-voip/mumble https://github.com/mumble-voip/mumble

anotherevan 11y ago

I think if I was any project leaving sourceforge, I would try and delete as much as possible, including the user account. Failing that, I would upload as the last release an "installer" that just gives notice that downloads through sourceforge are no longer supported due to their scammy behaviour, and a link of where to get the valid download.

ChrisArchitect 11y ago

so what's the deal with the 'injection'? They've been bundling crapware with the installers for a few years at least right? But for a long while there was always an option on the file list/downloads page that users in the know could click to get a clean installer 'direct download'. That appears removed now, is that what everyone is up in arms about?

davidgerard 11y ago
A couple of years ago they started using a malware wrapper, that installed adware then did the real download. Projects got very upset and they swore they wouldn't do this again, then offered profitsharing (which some projects took them up on, e.g. Filezilla). Then, two years after promising they would never do this again, they started doing it again.