[TYPO3-about] Sourceforge spamming download packages with crapware

[Steffen Gebert]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear Jaston,

I just read this, and I agree. Although after quickly reading through
the linked post that the OS projects have to cooperate with SourceForge
(as they get a refund I guess they have to give their OK, don't they?),
this sheds a bad light on SourceForge.

IMHO we should keep an eye on it, how it is going on and maybe find a
different place for our releases (let it be Github or self-hosted).

Thanks for bringing this topic up here!

Kind regards
Steffen

- -- 
Steffen Gebert
TYPO3 Server Administration Team Member

TYPO3 .... inspiring people to share!
Get involved: http://typo3.org

My wish list:
https://www.amazon.de/registry/wishlist/922E3JYSQ7CV/ref=cm_wl_sb_v?sort=priority

On 8/27/13 7:42 PM, Jost Baron wrote:
> Hi all!
> 
> Through fefes blog [1] it came to my attention that sourceforge now
> inserts crapware into installers, for example the filezilla installer
> [2]. This IMHO makes sourceforge an untrustworthy source to download
> software from.
> 
> For these reasons, I request to drop sourceforge as the official
> download source for TYPO3, even if it is unlikely that TYPO3 is
> affected by crapware installers. Its the trustworthiness that matters
> here. The new download source should be, if possible, controlled by
> the TYPO3 Association.
> 
> Regards,
> Jost
> 
> [1] Fefes post, in german: http://blog.fefe.de/?ts=ace27dff
> [2] https://forum.filezilla-project.org/viewtopic.php?t=30240
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.20 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJSHRQ/AAoJEIskG/rSlyw4IOgIAJdDV1L2udRdEZua9pf0v09g
/Xu3cvPpzP4eF09Os4qx0E4VLxHCvzgmyKbatOjE/xpZh3fBdzw2gLdD4PBkJo0k
0N5EUr8KkyI4RulUdQbAnUwqVb9zF7hchrMxrF/ZTu3mujum9Z10o/8E+7IGZWXN
x/NbbaEbfCjq/9TsekfFZ0sCl8yhHDztRbU/Jhtx2JwuZFD1deadzGT7uVYoDHv7
N0pAcgKouUUekOdVayPWBOysy1rgzsq4eZ1STbx45X1DKdO5XnS9xqeTNcYTScJQ
l6+FiQgLCvvmX74jPgLt5LusxUlKbynvMkFOQDuKTnMSC8hwU69OwJR83xGEOOc=
=nM9T
-----END PGP SIGNATURE-----