Language Selection

English French German Italian Portuguese Spanish

SourceForge locked in projects of fleeing users, cashed in on malvertising [Updated]

Filed under

The takeover of the SourceForge account for the Windows version of the open-source GIMP image editing tool reported by Ars last week is hardly the first case of the once-pioneering software repository attempting to cash in on open-source projects that have gone inactive or have actually attempted to shut down their SourceForge accounts. Over the past few years, SourceForge (launched by VA Linux Systems in 1999 and now owned by the tech job site company previously known as Dice) has made it a business practice to turn abandoned or inactive projects into platforms for distribution of "bundle-ware" installers.

Despite promises to avoid deceptive advertisements that trick site visitors into downloading unwanted software and malware onto their computers, these malicious ads are legion on projects that have been taken over by SourceForge's anonymous editorial staff. SourceForge's search engine ranking for these projects often makes the site the first link provided to people seeking downloads for code on Google and Bing search results.

And because of SourceForge's policies, it's nearly impossible for open-source projects to get their code removed from the site. SourceForge is, in essence, the Hotel California of code repositories: you can check your project out any time you want, but you can never leave.

Read more

[Ed: Why am I not surprised?]

More in Tux Machines

Type Title Author Replies Last Postsort icon
Story Linux 5.5-rc2 Rianne Schestowitz 1 16/12/2019 - 1:15am
Story ArcMenu 38 Adds KRunner Inspired Layout + More Rianne Schestowitz 16/12/2019 - 1:05am
Story All the world's top 500 supercomputers run Linux Rianne Schestowitz 16/12/2019 - 12:59am
Story Rough, tough in-vehicle computer offers PoE and battery backup Roy Schestowitz 15/12/2019 - 9:24pm
Story Latest HowTos and Programming Bits Roy Schestowitz 15/12/2019 - 9:16pm
Story Raspberry Pi 4 BCM43455 NVRAM Addition Hits Linux-Firmware Git Roy Schestowitz 15/12/2019 - 9:14pm
Story Android Leftovers Rianne Schestowitz 15/12/2019 - 8:59pm
Story ArcticFox 27.9.19 release Roy Schestowitz 15/12/2019 - 8:26pm
Story Benchmarking 11 Linux Distributions Across Dozens Of Workloads On The Intel Core i9 10980XE Rianne Schestowitz 1 15/12/2019 - 8:23pm
Story FreeDOS 1.3 RC2 Roy Schestowitz 15/12/2019 - 8:21pm