I believe if we sign the binaries SF cannot modify them.

Jason

-----Original Message-----
From: Scons-dev [mailto:[email protected]] On Behalf Of Dirk Bächle
Sent: Thursday, June 18, 2015 1:11 PM
To: [email protected]
Subject: Re: [Scons-dev] Migrate downloads from Sourceforge.net?

Hi,

On 18.06.2015 16:58, Bill Deegan wrote:
> All,
>
> Should we migrate off sourceforge.net <http://sourceforge.net> as download 
> host?
> They're getting bad reputation for inserting crapware in their hosted windows 
> installers..
>

I'm against panicking, and spreading further FUD. Do we have concrete evidence 
that the SCons Windows installers are actually affected?
Even if they are, we could still contact SourceForge and ask them to not do 
it...or then we'll migrate away.

But as far as I understood from pages like:

    https://news.ycombinator.com/item?id=6262347
    
http://www.expertreviews.co.uk/software/1403408/the-beginning-of-the-end-for-crapware-installers
    https://notepad-plus-plus.org/news/notepad-plus-plus-leaves-sf.html

the owner of the project has to agree that SF wraps the downloads, and I don't 
think we've taken this step in the past, or have we?

SF just offers a whole lot of infrastructure (download, statistics, ...) for 
free, and a real alternative isn't really in sight. So we should try to stick 
with it. We can still offer the packages on bitbucket in parallel and point 
users (which might be concerned about SFs policies) to it. So it gets their 
choice, not ours...

Just my 2 cents.

Best regards,

Dirk

_______________________________________________
Scons-dev mailing list
[email protected]
https://pairlist2.pair.net/mailman/listinfo/scons-dev
_______________________________________________
Scons-dev mailing list
[email protected]
https://pairlist2.pair.net/mailman/listinfo/scons-dev

Reply via email to