News for hackers. Stuff that matters.
Re:Sourceforge Hijacks the Nmap Sourceforge Account by ghshephard on Wednesday June 03, 2015 @05:20AM (#9651416)
This is the sort of behavior you get from a company that's lost, and is now trying to extract every penny they can from whatever shenanigans they can get away with.

If they have no future brand value to be concerned about, then, from a game-theoretic approach, it's actually a pretty rational profit seeking move. (As long as they don't incur any downstream liabilities from outright illegal activity for which they might be fined, or successfully sued - if there is any entity left to sue)

Of course, the game-theoretic response from the entire internet community is to make sure they never, ever, for any reasons whatsoever, ever click on a link that starts with "sourceforge.net"

Re:Sourceforge Hijacks the Nmap Sourceforge Account by mapt on Wednesday June 03, 2015 @07:04AM (#9651734)
Has Archiveteam, Internet Archive or anyone else taken a shot at mirroring Sourceforge, including binaries? Since its founding there have been a hell of a lot of small projects hosted there whose sites have gone down since. 430,000 projects have been hosted on SourceForge at some point. At least a few tens of thousands of them represent the only remaining copy of a program needed to read a certain sort of data. Maintaining that capability in the face of a company circling the drain represents an extreme historical utility.

Even if you now need a VM to handle the crapware, that's better than losing the apps entirely. If somebody maintained a time-diffed mirror of SourceForge, they could pinpoint the last version before the bundling event occurred in an automated fashion, as well.

EDIT: It seems there's a project to begin this - http://archiveteam.org/index.php?title=SourceForge and an IRC channel, EFNet #coldstorage

Re:Sourceforge Hijacks the Nmap Sourceforge Account by TazeTSchnitzel on Wednesday June 03, 2015 @10:50AM (#9652958)
Archiving SourceForge is indeed important. Just recently I needed it to hook up a printer: http://sourceforge.net/projects/gimp-print/files/usbtb%20-%2...
Re:Sourceforge Hijacks the Nmap Sourceforge Account by castell on Wednesday June 03, 2015 @07:41AM (#9651854)
We need a open source community website that manages and links to the download-mirrors (HEANET, etc.). There is no need to backup the downloads, just back up the source code and friendly take over the control over the mirrors.
Re:Sourceforge Hijacks the Nmap Sourceforge Account by pjc50 on Wednesday June 03, 2015 @06:02AM (#9651559)
You either go bankrupt as a hero or live long enough to become the monetisation villain.
Re:Sourceforge Hijacks the Nmap Sourceforge Account by scrollaway on Wednesday June 03, 2015 @07:09AM (#9651752)
This is a bit controversial because people like to remember Sourceforge fondly for some reason, but it was never good. It was merely unchallenged.

Google Code was never good either, but people gladly moved from SF to Google Code. And when something actually good came along (Github), Sourceforge simply vanished.

Sourceforge was never a hero. It was a horrible website, with horrible UX. It always had pretty terrible ads and for the past couple of years it has been repeatedly abusing its users' trust, serving malware, been involved in countless drama.

Glad it's gone.

Re:Sourceforge Hijacks the Nmap Sourceforge Account by gutnor on Wednesday June 03, 2015 @08:58AM (#9652170)
People remember Sourceforge fondly because the service they offered, for the time, was good.

Everything internet sucked around 2000. Search engines where either semi-curated listing or covered a fraction of what was a much smaller internet. Free hosting was a joke, affordable paid hosting was not much better. Your bandwidth at home was not good and anyway your computer was not the powerhouse it is today - you needed to upgrade just to run the next version of Excel, not to play the next AAA game. A lot of websites had terrible UX.

So Sourceforge was not great, but it offered a great package of functionality that basically solved in one shot all the problem of managing a OSS project and gave one roof where to search for new tools and libraries.

What happened is that they stagnated and their utility eroded over the time starting by Google removing any reason to have everything in a central place.

Re:Sourceforge Hijacks the Nmap Sourceforge Account by hollerith on Wednesday June 03, 2015 @09:57AM (#9652535)
>Everything internet sucked around 2000. Search engines where either semi-curated listing or covered a fraction of what was a much smaller internet.

I disagree, and in fact preferred the internet of 2000 to the internet of 2015.

Google search worked fine in 2000: although SEO existed in 2000, it was much less refined and extensive than in 2015. The main problem in search results today is that profit-motivated content crowds out and makes it difficult to find not-profit-motivated superior content.

Not all the changes are bad, of course. Video in particular (not just bandwidth, but the convenience for consumers and amateur producers provided by Youtube) is much better (but text is more important to me than video). A computer with adequate performance is a lot cheaper in real dollars.

>A lot of websites had terrible UX.

I preferred the UX of the web of 2000 to the UX of the web of today. Searching a web page for a string, copying from a web page, then pasting, scrolling, use of keyboard shortcuts, bookmarking (some sites today have all content sharing the same URL, making bookmarking virtually impossible) all were simpler and more consistent across web pages, therefore requiring less deliberative thought to use, and IMHO thereby better.

In other words, on the web of today, I have to direct my attention to the mechanics of the web page, e.g., how to dismiss the interstitial asking me to follow them on Facebook or whatever so that I can start to see the actual content, which keyboard shortcuts have been overridden by the site, how to scroll and whether scrolling even works. In the web of 2000, I spent more of my time and attention on the actual content (particularly, textual content).

For those who remember the web of 2000: what about the UX of the web of today do you prefer? I have a theory that some people are more easily bored than others and that those people appreciate the web of today because the increase in variety, color and motion (of elements on the page) helps keep them from getting bored. Is that it?

(I remember the Sourceforge of 2000, but have nothing to say about it.)

ADDED. I neglected to consider that Wikipedia did not exist in 2000, which significantly changes the balance. I still disagree with "Everything internet sucked around 2000". In particular, I miss web sites created by individuals not expecting to make money from their writings. Although many (most?) of those web sites still exist, they've become vastly harder to find with a search engine because of content farms and other professionally-produced professionally-SEOed content.

Re:Sourceforge Hijacks the Nmap Sourceforge Account by gutnor on Wednesday June 03, 2015 @10:44AM (#9652910)
You probably mean that you like the good design from 2000 (and well I share your opinion on that). But there was also the bad ones and there was a lot of them.

The majority of banking sites required you to use ActiveX, very frequently the shopping websites would use weirdo content plugins or have their content in PDF.

Those were the times of multi-frame abuse, webpage with sound and no control, site trying to be clever and disabling right-click. Pop-ups everywhere, site hijacking your browser window and resizing, moving it around. Stupid cursor that make your computer grind to a halt. Site designed for 640x480 and nothing else.

Remember the "blog"-like personal website on geocities and the like ? Remember the portals ?

What I remember most from the time is how much superior I thought the newsgroups were to find anything.

Re:Sourceforge Hijacks the Nmap Sourceforge Account by romaniv on Wednesday June 03, 2015 @12:55PM (#9653998)
Those were the times of multi-frame abuse, webpage with sound and no control, site trying to be clever and disabling right-click. Pop-ups everywhere, site hijacking your browser window and resizing, moving it around. Stupid cursor that make your computer grind to a halt. Site designed for 640x480 and nothing else.

A lot of these still happen, except they are using different technologies and look slightly different. We have parallax scrolling, Bootstrap-like modal windows, unlinkable single-page apps, websites that screw up "back" button and above all we have pages that require you to download several megabytes of junk and execute tons of JavaScript just to read several kilobytes of text.

Re:Sourceforge Hijacks the Nmap Sourceforge Account by mindslight on Wednesday June 03, 2015 @03:18PM (#9655098)
Wholly agree on the state of searching. These days pretty much any important words in my technical queries are ignored, and the results end up with the same landing pages for the project I'm searching about mixed in with pop culture trash and autogenerated spam pages rather than anything relevant to the narrower query. It's not a library of knowledge, but a wall of noise.

I've tried eg Yandex and it's not much better, mostly just different (although they do return a good amount of results for things that Google's thought police have vanished). The unfortunate truth is that with the "internet" entering pop culture, pop culture has watered down the Internet.

I was thinking it would be interesting experiment to take adblock one step further and hack something up that retrieved all the Google results and filtered out everything with any advertising. It seems like I'd come across those hard-wrought dense-knowledge textual pages far quicker, since the author's motivation is to share knowledge.

Re:Sourceforge Hijacks the Nmap Sourceforge Account by stephengillie on Wednesday June 03, 2015 @10:39AM (#9652870)
Re:Sourceforge Hijacks the Nmap Sourceforge Account by oldmanjay on Wednesday June 03, 2015 @02:07PM (#9654615)
Here's a good rule of thumb to keep in mind:

Any time you have a "theory" about other people that implies that you have a natural superiority to them based on your belief that you have superior taste, you're almost certainly full of yourself

Re:Sourceforge Hijacks the Nmap Sourceforge Account by hollerith on Wednesday June 03, 2015 @02:18PM (#9654691)
I can usually stay engaged and interested in static documents consisting of black text on a white background for many hours in a row. Some of the people in my life need more mental stimulation than that can provide, and spontaneously tell me as much. (Their main source of mental stimulation is social interaction.)

What part of that or my other comment implies that I think I have superior taste?

Re:Sourceforge Hijacks the Nmap Sourceforge Account by oldmanjay on Wednesday June 03, 2015 @03:18PM (#9655095)
Your entire comment is a statement that the web of 2K-ish was superior, and that it is also to your taste, so there's the implication.

Also, in truth, I'm just tired of the "everything new is shitty, everything old is grand" comments on nerd sites, so I call them out habitually.

Re:Sourceforge Hijacks the Nmap Sourceforge Account by mrdatawolf on Wednesday June 03, 2015 @04:13PM (#9655528)
Well "...need more..." implies you are superior because you don't. As well as "... and spontaneously tell me as much." which implies they give you facts you didn't ask for and coupled with the rest of the comment implies you had no interest in knowing i.e. are time wasters.
Re:Sourceforge Hijacks the Nmap Sourceforge Account by e12e on Wednesday June 03, 2015 @03:08PM (#9655020)
I wonder if this comment might not be an example of the point it is trying to make?
Re:Sourceforge Hijacks the Nmap Sourceforge Account by jamespo on Wednesday June 03, 2015 @10:18AM (#9652695)
I prefer using wikipedia or stackexchange for information rather than searching for hours
Re:Sourceforge Hijacks the Nmap Sourceforge Account by romaniv on Wednesday June 03, 2015 @01:00PM (#9654058)
Wikipedia and Stack Exchange provide only one kind of information. There are several other types of websites that either went extinct or turned to garbage. Dr. Dobbs is a good example. StackOverflow might be the thing that helps you find a workaround for some API stupidity, but you are not going to "read" StackExchange on daily basis.
Re:Sourceforge Hijacks the Nmap Sourceforge Account by yc1010 on Wednesday June 03, 2015 @07:19AM (#9651784)
Whats worse is that they never had to spend a penny on hosting opensource files, the likes of HEANET in Ireland paid out of their pocket (well me and other Irish taxpayers did in end) to host terabytes of files and use gigabits on downloads at a time when bandwidth was expensive (10 years back bandwidth was a lot more and HEAnets downloads were always fast and I know the guys used a lot of hardware back then for the mirror to support open source).
Re:Sourceforge Hijacks the Nmap Sourceforge Account by castell on Wednesday June 03, 2015 @07:40AM (#9651851)
That's it, we need a open source community website that manages and links to the mirrors (HEANET, etc.).
Re:Sourceforge Hijacks the Nmap Sourceforge Account by chx on Wednesday June 03, 2015 @11:32AM (#9653308)
ftp.heanet.ie was a 32GB Itanium, one of the first Itanium servers I know of.
Re:Sourceforge Hijacks the Nmap Sourceforge Account by Nelson69 on Wednesday June 03, 2015 @01:55PM (#9654535)
This doesn't seem quite fair. I don't remember anything else like sourceforge when it came out in 1999. If you ran a project, you found a host somehow or paid for one, and you effectively managed and setup all of the services. From just the web site for the project itself, to the source code control, to mailing lists and bug tracking if you need them, forums. Further, colocation was common but VPS wasn't, if you rolled your own host you were on the hook for a computer for it. Now there may have been something else out there but I don't remember it and sourceforge was embraced because of it. They dramatically lowered the cost and effort to putting an opensource project out there. I assume that they basically created the model google code and github and the others have followed.

They've been in trouble, effectively since VA Linux's stock crashed...

Re:Sourceforge Hijacks the Nmap Sourceforge Account by jpatokal on Wednesday June 03, 2015 @07:24AM (#9651800)
Your gladness is premature: it's still alive and kicking, if busily shooting at its own feet while it does so.
Re:Sourceforge Hijacks the Nmap Sourceforge Account by bad_user on Wednesday June 03, 2015 @06:42AM (#9651675)
Sounds like a wise saying that I've read on every submission about Sourceforge, problem is that I think it is in general bullshit.

If we'll look down in history, I think there are very few villains that have acted as heroes when starting out. The signs that such companies are assholes are in general there, from the start. As an example, I don't remember a time in which Sourceforge was the hero, as much as I try. Since as long as I remember Sourceforge, it was always the "necessary evil", the nuisance you have to deal with because bandwidth was (and still is) very expensive.

Re:Sourceforge Hijacks the Nmap Sourceforge Account by chillingeffect on Wednesday June 03, 2015 @07:06AM (#9651740)
> I don't remember a time in which Sourceforge was the hero, as much as I try

No offense to you personally, but this is a case where it's about grey hair more than ability.

There was certainly a time when Sourceforge was the wham-bam-snickety-snack boom-blam bomb. It was when Slashdot was the Hacker News, when "LAMP" was a new term, when 10Gbps across the U.S. (vs. your living room) was a Big Deal.

> If we'll look down in history, I think there are very few villains that have acted as heroes when starting out.

This is called playing "I told you so." In reality every organization begins with high ideals then adjusts to reality. The elegance of this transition defines how villainous they've become. Consider McDonalds and Whole Foods. Both seemed delightful at the beginning. We see how McDs is now cancerous (or at least diabetesacious) and Whole Foods is anti-union, but surviving anyway, a "mundane evil."

You can't predict which company will become evil or not.

Re:Sourceforge Hijacks the Nmap Sourceforge Account by pjc50 on Wednesday June 03, 2015 @07:32AM (#9651818)
Well, it was a joke based on a cliche from a Batman film. In terms of wise sayings, it's on the level of fortune cookies.

But the underlying point is similar to "you are the product". People chose Sourceforge because it offered free hosting. It was for a long time the "default" choice, back in the early 2000s. They had banner ads, usually from other Linux companies, and that seemed to pay for it. It was easier to use than FTP sites.

The question always remains: who is going to pay for it? If a company is sinking, then they have only two options, to close it down or to engage in ever-shadier chasing of monetisation options. Can you imagine the outrage if they'd put up a paywall? It's basically the same politics as has made "free to play (with gouging IAPs)" the default mode of paying for mobile apps.

Re:Sourceforge Hijacks the Nmap Sourceforge Account by bad_user on Wednesday June 03, 2015 @08:00AM (#9651922)
Not sure how profitable GitHub is, but there are users paying for private repositories or for the Enterprise version and the revenues thus far seem to be enough to support the free users as well and to an outsider like me being a win-win situation, since GitHub is now the place to be on, with open-source projects giving them free exposure, with the Enterprise version starting to win against other established solutions because "everybody knows GitHub". I used to be a paying customer of GitHub, now I'm enjoying the free benefits and pushing for the Enterprise edition in my organization. Am I the product in this case?

I do hate the "free to play (with gouging IAPs)" model and I actually prefer ads with an option to go ad-free. However even with this business model there are heroes. See for example Path of Exile, a free game in which the in-app purchases do not have an impact on your ability to win: https://www.pathofexile.com/

I do agree with you, the chosen business model makes the difference. I do believe that ads aren't inherently evil, it's just the status quo that is. Yes, today ad-supported means that we are the product, but this product has a free will, a fact that some companies are forgetting. At the very least there are some signs of change. Google for example is at least trying to play it both ways - you can be a paying customer of Google Apps and they'll introduce subscriptions to YouTube for going ads free (with the ability to cache content for offline viewing on mobile devices being the incentive needed for regular folks).

Re:Sourceforge Hijacks the Nmap Sourceforge Account by pjc50 on Wednesday June 03, 2015 @08:18AM (#9651987)
Github are indeed the heroes of the day and have an enterprise revenue model. So far, so good. But Sourceforge is sixteen years old. Will Github still be the good guys in 2030? It's impossible to know.
Re:Sourceforge Hijacks the Nmap Sourceforge Account by ksherlock on Wednesday June 03, 2015 @08:45AM (#9652087)
SourceForge used to have an enterprise revenue model, too. They bet the company (or at least the name) on it - VA Research -> VA Linux -> VA Software -> SourceForge -> GeekNet -> {Dice and HotTopic^WGameStop}.

If Github ever pivots to selling t-shirts, run.

Re:Sourceforge Hijacks the Nmap Sourceforge Account by judofyr on Wednesday June 03, 2015 @08:58AM (#9652172)
Re:Sourceforge Hijacks the Nmap Sourceforge Account by yellowapple on Wednesday June 03, 2015 @08:32PM (#9656780)
Welp. Time to switch to BitBucket, then.
Re:Sourceforge Hijacks the Nmap Sourceforge Account by Nelson69 on Wednesday June 03, 2015 @03:09PM (#9655033)
SF/VA gave Linus and ESR stock. I believe ESR and several others were on some sort of community advisory committee to them. Part of SF's problem was that they didn't want to pick winners so much as create and facilitate "community" they had multiple choices for different tools they hosted. They had build servers and such as that seemed at the time like problem space (how do you know if your code runs on Itanium?) They made, what at the time was, an unprecedented effort to engage community and not be evil.

Ultimately someone needs to pay some bills though, a few transactions later and this seems remarkably far from their start. It's embarrassing and shocking.

Re:Sourceforge Hijacks the Nmap Sourceforge Account by pron on Wednesday June 03, 2015 @07:19AM (#9651783)
> I think there are very few villains that have acted as heroes when starting out.

The logical implication in that line flows in the other direction. It's not that every villain started out a hero, but that every hero (that survives long enough) ends up a villain. Of course, it's untestable as there's no limit on "long enough", but then again, it's just a line from a movie...

Re:Sourceforge Hijacks the Nmap Sourceforge Account by pbhjpbhj on Wednesday June 03, 2015 @10:54AM (#9652994)
How long have you been using SourceForge?

I remember a time when it was a fantastic resource, that it was one of the primary places to get FOSS - my earliest bookmarked link is for AFPL Ghostscript from 2004. IIRC I started using it around 1999 when I first installed Linux. There was Freshmeat too but that IME had far fewer of the major projects. Searching SourceForge was the best way to find projects for a particular need at the time.

The last FOSS project I downloaded there that isn't available elsewhere was last month.

Re:Sourceforge Hijacks the Nmap Sourceforge Account by robogimp on Wednesday June 03, 2015 @05:51AM (#9651527)
The problem now is raising the alarm all the way out to the endest of end users, that this formerly trusted site cannot be trusted anymore.

Perhaps Google could step up and de-list them, but that is a pretty slippery slope.

Re:Sourceforge Hijacks the Nmap Sourceforge Account by gadders on Wednesday June 03, 2015 @06:30AM (#9651642)
Patio11 suggested that in relatoin to Gimp. Also, someone helpfully posted the google link to report websites:

https://www.google.com/safebrowsing/report_badware/

Suggested reason is "embeds malware/adware with downloads".

Re:Sourceforge Hijacks the Nmap Sourceforge Account by lawl on Wednesday June 03, 2015 @06:54AM (#9651703)
Could also write mails to the mirror providers listed here: http://sourceforge.net/p/forge/documentation/Mirrors/

And ask them to stop mirroring SF because they distribute Malware. I don't know how many of them provide the mirror for free though. I remember quite a few universities provided SF mirrors back in the day.

Re:Sourceforge Hijacks the Nmap Sourceforge Account by Rudism on Wednesday June 03, 2015 @11:47AM (#9653406)
I doubt this would ever happen. A large portion of Google's own ad revenue comes from companies distributing adware. I worked for a company that was in the adware distribution business and we funnelled millions to Google--to the point that we had dedicated account reps at Google who helped us to make sure we stayed compliant with Google's adwords policies so we could keep peddling our adware installers.
Re:Sourceforge Hijacks the Nmap Sourceforge Account by anilgulecha on Wednesday June 03, 2015 @06:25AM (#9651627)
No it isn't. The site was relevant before as it served what people needed, and was ranked high. It no longer is serving folks' interests, so it can be ranked lower, or de-listed. Completely fine.
Re:Sourceforge Hijacks the Nmap Sourceforge Account by robogimp on Wednesday June 03, 2015 @01:12PM (#9654153)
I agree with you. To clarify my slippery slope comment, it applies in general to all users of censorship powers. Who is a fit judge to decide what you and I get to see?

D-listing from Google is basically being taken off the internet, so wielding that power too often might get Big G into alot of trouble with agencies like the European Commission.

On balance I think SourceForge deserves a browser level "here be malware" warning, trusting that most users will make the right choice if informed.

Re:Sourceforge Hijacks the Nmap Sourceforge Account by ikeboy on Wednesday June 03, 2015 @09:48AM (#9652466)
>Of course, the game-theoretic response from the entire internet community is to make sure they never, ever, for any reasons whatsoever, ever click on a link that starts with "sourceforge.net"

That's a nice idealistic response, but what about when you can't find a file anywhere else?

Re:Sourceforge Hijacks the Nmap Sourceforge Account by scuba7183 on Wednesday June 03, 2015 @10:44AM (#9652915)
Depends on how much you need the file
Re:Sourceforge Hijacks the Nmap Sourceforge Account by yellowapple on Wednesday June 03, 2015 @08:36PM (#9656792)
So that's when we start downloading Sourceforge's files en masse (with ad-blockers enabled so that they're not rewarded for their misbehavior), stripping out the malware, and rehosting them somewhere.
Re:Sourceforge Hijacks the Nmap Sourceforge Account by javert on Wednesday June 03, 2015 @02:02PM (#9654587)
It can never be rational to violate other people, because if you have a rational system of values, doing so will make you feel bad.

Drag down SourceForge all you want (I applaud that) but don't drag down rationality with it.

Re:Sourceforge Hijacks the Nmap Sourceforge Account by omegafail on Wednesday June 03, 2015 @05:26AM (#9651435)
Simply add their domain to the hosts file to prevent any accidental downloading.
Re:Sourceforge Hijacks the Nmap Sourceforge Account by zaphar on Wednesday June 03, 2015 @10:00AM (#9652551)
This is a solution for me. It's not a solution for the hundreds of people I've told about GiMP over the years. Some of whom I no longer have contact with. Those people don't know how to edit their hosts file.

I'm not worried for myself I'm worried for them.