Re: [fpc-devel] [Core] Dangerous download on bug report

[Bart via fpc-devel]

On Wed, Feb 24, 2021 at 1:42 PM J. Gareth Moreton via fpc-devel
 wrote:

> The messages are marked as private.

They weren't in the past though.
The good news is that I don't have to get new glasses.


-- 
Bart
___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel

Re: [fpc-devel] [Core] Dangerous download on bug report

[J. Gareth Moreton via fpc-devel]

Okay, it works as expected for me now too - sorry for the panic. I've 
just never had something like that happen before.


The messages are marked as private.

Gareth aka. Kit

On 24/02/2021 12:09, Christo Crause via fpc-devel wrote:
On Wed, Feb 24, 2021 at 1:50 PM Luca Olivetti via fpc-devel 
> wrote:


I don't see any comment made on that date. I see one made at
2021-02-07
22:07 and the next one is at 2021-02-23 21:57


I also see the same gap from the 7th to the 23rd. Perhaps the message 
was marked as private and one needs admin or developer status to view it?


___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel



--
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus
___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel

Re: [fpc-devel] [Core] Dangerous download on bug report

[Christo Crause via fpc-devel]

On Wed, Feb 24, 2021 at 1:50 PM Luca Olivetti via fpc-devel <
fpc-devel@lists.freepascal.org> wrote:

> I don't see any comment made on that date. I see one made at 2021-02-07
> 22:07 and the next one is at 2021-02-23 21:57


I also see the same gap from the 7th to the 23rd.  Perhaps the message was
marked as private and one needs admin or developer status to view it?
___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel

Re: [fpc-devel] [Core] Dangerous download on bug report

[Luca Olivetti via fpc-devel]

El 24/2/21 a les 12:11, Michael Van Canneyt via fpc-devel ha escrit:



On Wed, 24 Feb 2021, Bart via fpc-devel wrote:


On Wed, Feb 24, 2021 at 10:06 AM Bart  wrote:


I have downloaded that file (some time ago)


The download links seems to have gone from the bugreport?
(Or maybe I need new glasses)


No, it is still there, comment from 2021-02-09 22:25:

https://bugs.freepascal.org/view.php?id=38451#c128844

Time for a visit to Pearle opticians ;-)


I don't see any comment made on that date. I see one made at 2021-02-07 
22:07 and the next one is at 2021-02-23 21:57


Bye
--
Luca
___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel

Re: [fpc-devel] [Core] Dangerous download on bug report

[Jonas Maebe via fpc-devel]

On 24/02/2021 12:11, Michael Van Canneyt via fpc-devel wrote:
> 
> 
> On Wed, 24 Feb 2021, Bart via fpc-devel wrote:
> 
>> The download links seems to have gone from the bugreport?
>> (Or maybe I need new glasses)
> 
> No, it is still there, comment from 2021-02-09 22:25:
> 
> https://bugs.freepascal.org/view.php?id=38451#c128844

It's a private comment. I can only see it when I'm logged in.


Jonas
___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel

Re: [fpc-devel] [Core] Dangerous download on bug report

[Michael Van Canneyt via fpc-devel]

On Wed, 24 Feb 2021, Bart via fpc-devel wrote:


On Wed, Feb 24, 2021 at 10:06 AM Bart  wrote:


I have downloaded that file (some time ago)


The download links seems to have gone from the bugreport?
(Or maybe I need new glasses)


No, it is still there, comment from 2021-02-09 22:25:

https://bugs.freepascal.org/view.php?id=38451#c128844

Time for a visit to Pearle opticians ;-)

Michael.
___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel

Re: [fpc-devel] [Core] Dangerous download on bug report

[Bart via fpc-devel]

On Wed, Feb 24, 2021 at 10:06 AM Bart  wrote:

> I have downloaded that file (some time ago)

The download links seems to have gone from the bugreport?
(Or maybe I need new glasses)

-- 
Bart
___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel

Re: [fpc-devel] [Core] Dangerous download on bug report

[Jonas Maebe via fpc-devel]

On 2021-02-24 08:29, J. Gareth Moreton via fpc-devel wrote:

It was through Mozilla Firefox though, so it might behave differently 
on different browsers.


Perhaps a malicious ad on the site hijacked your click? If you don't use 
it yet, I'd strongly recommend adding 
https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/ to 
Firefox.



Jonas___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel

Re: [fpc-devel] [Core] Dangerous download on bug report

[Michael Van Canneyt via fpc-devel]

On Wed, 24 Feb 2021, Bart via fpc-devel wrote:


On Wed, Feb 24, 2021 at 8:36 AM Michael Van Canneyt via fpc-devel
 wrote:


I am also using Mozilla Firefox.


So do I.
I have downloaded that file (some time ago) just to see if I could
simplify the problem.
I had no problems, it was just a zip file with enormous amounst of
code with a gazillion of ifdefs (so I gave up trying to simplifyt the
problem).


I even downloaded the file with wget from the link in the page. No problems
whatsoever.

Michael.
___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel

Re: [fpc-devel] [Core] Dangerous download on bug report

[Bart via fpc-devel]

On Wed, Feb 24, 2021 at 8:36 AM Michael Van Canneyt via fpc-devel
 wrote:

> I am also using Mozilla Firefox.

So do I.
I have downloaded that file (some time ago) just to see if I could
simplify the problem.
I had no problems, it was just a zip file with enormous amounst of
code with a gazillion of ifdefs (so I gave up trying to simplifyt the
problem).


-- 
Bart
___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel

Re: [fpc-devel] [Core] Dangerous download on bug report

[Michael Van Canneyt via fpc-devel]

I am also using Mozilla Firefox.

Michael.

On Wed, 24 Feb 2021, J. Gareth Moreton via fpc-devel wrote:

It was through Mozilla Firefox though, so it might behave differently on 
different browsers.


On 24/02/2021 07:28, J. Gareth Moreton via fpc-devel wrote:


I tried to download the file but the link had me download an installer for 
the file instead, which installed malware.


Gareth aka. Kit

On 24/02/2021 07:25, Michael Van Canneyt via fpc-devel wrote:


Gareth,

I don't know what you've been doing on that site, but I downloaded the 
bugreport
file without problems. I didn't have to install anything, just downloaded 
a

zip without the need to download or install anything else. The zip file
contains only (a lot of) pascal files.

I agree the method is somewhat unusual but as far as I can see the 
download

is bona fide.

Michael.


On Wed, 24 Feb 2021, J. Gareth Moreton wrote:

A follow-up.  I did some research on one of the 3rd party tools that was 
installed... IdleBuddy.  IT IS MALWARE.  Specifically it is a crypto 
miner (one that uses your resources and gives the credit to someone 
else).


Ironically, I use my laptop for crypto mining, so all my hardware 
resources are in use anyway!  Still, you bet I'm going to be giving my 
laptop a thorough scan now.  Curses.


Gareth aka. Kit

On 24/02/2021 05:54, J. Gareth Moreton via fpc-devel wrote:

Hi everyone,

This is a bit of a public service announcement.  I tried to look at this 
bug:


https://bugs.freepascal.org/view.php?id=38451

The poster offered a ZIP download of their project, but it's hosted by a 
questionable site, since it requires browser add-ons (including Adobe 
Flash) and a client program (which apparently was digitally signed and 
recognised by Windows). It installed Opera and a number of 3rd Party 
Windows Services without permission. I've managed to uninstall said 
programs, and now I'm running a full virus scan because, frankly, I 
don't trust everything to be gone.


I made a post on the bug report suggesting the author use a different 
download provider.  But long story short, DO NOT DOWNLOAD FROM THE LINK 
PROVIDED.


Gareth aka. Kit




--
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

___
core site list
c...@freepascal.org
https://idefix.freepascal.org/cgi-bin/mailman/listinfo/core



___
fpc-devel maillist  -fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel


 
Virus-free. www.avast.com 
 


<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel
___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel

Re: [fpc-devel] [Core] Dangerous download on bug report

[J. Gareth Moreton via fpc-devel]

It was through Mozilla Firefox though, so it might behave differently on 
different browsers.


On 24/02/2021 07:28, J. Gareth Moreton via fpc-devel wrote:


I tried to download the file but the link had me download an installer 
for the file instead, which installed malware.


Gareth aka. Kit

On 24/02/2021 07:25, Michael Van Canneyt via fpc-devel wrote:


Gareth,

I don't know what you've been doing on that site, but I downloaded 
the bugreport
file without problems. I didn't have to install anything, just 
downloaded a

zip without the need to download or install anything else. The zip file
contains only (a lot of) pascal files.

I agree the method is somewhat unusual but as far as I can see the 
download

is bona fide.

Michael.


On Wed, 24 Feb 2021, J. Gareth Moreton wrote:

A follow-up.  I did some research on one of the 3rd party tools that 
was installed... IdleBuddy.  IT IS MALWARE.  Specifically it is a 
crypto miner (one that uses your resources and gives the credit to 
someone else).


Ironically, I use my laptop for crypto mining, so all my hardware 
resources are in use anyway!  Still, you bet I'm going to be giving 
my laptop a thorough scan now.  Curses.


Gareth aka. Kit

On 24/02/2021 05:54, J. Gareth Moreton via fpc-devel wrote:

Hi everyone,

This is a bit of a public service announcement.  I tried to look at 
this bug:


https://bugs.freepascal.org/view.php?id=38451

The poster offered a ZIP download of their project, but it's hosted 
by a questionable site, since it requires browser add-ons 
(including Adobe Flash) and a client program (which apparently was 
digitally signed and recognised by Windows). It installed Opera and 
a number of 3rd Party Windows Services without permission. I've 
managed to uninstall said programs, and now I'm running a full 
virus scan because, frankly, I don't trust everything to be gone.


I made a post on the bug report suggesting the author use a 
different download provider.  But long story short, DO NOT DOWNLOAD 
FROM THE LINK PROVIDED.


Gareth aka. Kit




--
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

___
core site list
c...@freepascal.org
https://idefix.freepascal.org/cgi-bin/mailman/listinfo/core



___
fpc-devel maillist  -fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel


 
	Virus-free. www.avast.com 
 



<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel
___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel

Re: [fpc-devel] [Core] Dangerous download on bug report

[J. Gareth Moreton via fpc-devel]

I tried to download the file but the link had me download an installer 
for the file instead, which installed malware.


Gareth aka. Kit

On 24/02/2021 07:25, Michael Van Canneyt via fpc-devel wrote:


Gareth,

I don't know what you've been doing on that site, but I downloaded the 
bugreport
file without problems. I didn't have to install anything, just 
downloaded a

zip without the need to download or install anything else. The zip file
contains only (a lot of) pascal files.

I agree the method is somewhat unusual but as far as I can see the 
download

is bona fide.

Michael.


On Wed, 24 Feb 2021, J. Gareth Moreton wrote:

A follow-up.  I did some research on one of the 3rd party tools that 
was installed... IdleBuddy.  IT IS MALWARE.  Specifically it is a 
crypto miner (one that uses your resources and gives the credit to 
someone else).


Ironically, I use my laptop for crypto mining, so all my hardware 
resources are in use anyway!  Still, you bet I'm going to be giving 
my laptop a thorough scan now.  Curses.


Gareth aka. Kit

On 24/02/2021 05:54, J. Gareth Moreton via fpc-devel wrote:

Hi everyone,

This is a bit of a public service announcement.  I tried to look at 
this bug:


https://bugs.freepascal.org/view.php?id=38451

The poster offered a ZIP download of their project, but it's hosted 
by a questionable site, since it requires browser add-ons (including 
Adobe Flash) and a client program (which apparently was digitally 
signed and recognised by Windows). It installed Opera and a number 
of 3rd Party Windows Services without permission. I've managed to 
uninstall said programs, and now I'm running a full virus scan 
because, frankly, I don't trust everything to be gone.


I made a post on the bug report suggesting the author use a 
different download provider.  But long story short, DO NOT DOWNLOAD 
FROM THE LINK PROVIDED.


Gareth aka. Kit




--
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

___
core site list
c...@freepascal.org
https://idefix.freepascal.org/cgi-bin/mailman/listinfo/core



___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel
___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel

Re: [fpc-devel] [Core] Dangerous download on bug report

[Michael Van Canneyt via fpc-devel]

Gareth,

I don't know what you've been doing on that site, but I downloaded the bugreport
file without problems. I didn't have to install anything, just downloaded a
zip without the need to download or install anything else. The zip file
contains only (a lot of) pascal files.

I agree the method is somewhat unusual but as far as I can see the download
is bona fide.

Michael.


On Wed, 24 Feb 2021, J. Gareth Moreton wrote:

A follow-up.  I did some research on one of the 3rd party tools that was 
installed... IdleBuddy.  IT IS MALWARE.  Specifically it is a crypto 
miner (one that uses your resources and gives the credit to someone else).


Ironically, I use my laptop for crypto mining, so all my hardware 
resources are in use anyway!  Still, you bet I'm going to be giving my 
laptop a thorough scan now.  Curses.


Gareth aka. Kit

On 24/02/2021 05:54, J. Gareth Moreton via fpc-devel wrote:

Hi everyone,

This is a bit of a public service announcement.  I tried to look at 
this bug:


https://bugs.freepascal.org/view.php?id=38451

The poster offered a ZIP download of their project, but it's hosted by 
a questionable site, since it requires browser add-ons (including 
Adobe Flash) and a client program (which apparently was digitally 
signed and recognised by Windows).  It installed Opera and a number of 
3rd Party Windows Services without permission. I've managed to 
uninstall said programs, and now I'm running a full virus scan 
because, frankly, I don't trust everything to be gone.


I made a post on the bug report suggesting the author use a different 
download provider.  But long story short, DO NOT DOWNLOAD FROM THE 
LINK PROVIDED.


Gareth aka. Kit




--
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

___
core site list
c...@freepascal.org
https://idefix.freepascal.org/cgi-bin/mailman/listinfo/core
___
fpc-devel maillist  -  fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel