[Cs-dev] SourceForge download

[Cs-dev] SourceForge download

Date	2015-07-11 17:21
From	Michael Gogins
Subject	[Cs-dev] SourceForge download
Attachments	None None
	I tried to download Csound onto a new WIndows computer from the default installer button n the Csound SourceForge page. The installer is over 200 MB but the dowloaded installer executable was under 1 MB. This made me suspicious. I went to the Files page and started my download from the "direct download" link, and the download (stillcoming down) is already much bigger My theory is that SourceForge wraps our binaries in some sort of installer app of their own. Perhaps this makes the dowload more reliable or something, but I am worried that it will bring along with it some sort of adware that it will install without telling me. I think the "direct ink" is the real file. Does anyone know anything about this? Regards, Mike ----------------------------------------------------- Michael Gogins Irreducible Productions http://michaelgogins.tumblr.com Michael dot Gogins at gmail dot com

Date	2015-07-11 18:26
From	Victor Lazzarini
Subject	Re: [Cs-dev] SourceForge download
	For OSX, all appears to be as usual, the DMG is the same size as before. ======================== Dr Victor Lazzarini Dean of Arts, Celtic Studies and Philosophy, Maynooth University, Maynooth, Co Kildare, Ireland Tel: 00 353 7086936 Fax: 00 353 1 7086952 > On 11 Jul 2015, at 17:21, Michael Gogins wrote: > > I tried to download Csound onto a new WIndows computer from the default installer button n the Csound SourceForge page. The installer is over 200 MB but the dowloaded installer executable was under 1 MB. This made me suspicious. I went to the Files page and started my download from the "direct download" link, and the download (stillcoming down) is already much bigger > > My theory is that SourceForge wraps our binaries in some sort of installer app of their own. Perhaps this makes the dowload more reliable or something, but I am worried that it will bring along with it some sort of adware that it will install without telling me. I think the "direct ink" is the real file. > > Does anyone know anything about this? > > Regards, > Mike > > ----------------------------------------------------- > Michael Gogins > Irreducible Productions > http://michaelgogins.tumblr.com > Michael dot Gogins at gmail dot com > ------------------------------------------------------------------------------ > Don't Limit Your Business. Reach for the Cloud. > GigeNET's Cloud Solutions provide you with the tools and support that > you need to offload your IT needs and focus on growing your business. > Configured For All Businesses. Start Your Cloud Today. > https://www.gigenetcloud.com/_______________________________________________ > Csound-devel mailing list > Csound-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/csound-devel ------------------------------------------------------------------------------ Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on growing your business. Configured For All Businesses. Start Your Cloud Today. https://www.gigenetcloud.com/ _______________________________________________ Csound-devel mailing list Csound-devel@lists.sourceforge.net

Date	2015-07-11 18:37
From	Michael Gogins
Subject	Re: [Cs-dev] SourceForge download
Attachments	None None
	Is there a default download button for the Mac on the main SourceForge page? That's what I'm talking about. It detects your OS and chooses the ddefault dowload for you. Maybe you didn't set the default download for the Mac when the file was uploaded? Regards, Mike ----------------------------------------------------- Michael Gogins Irreducible Productions http://michaelgogins.tumblr.com Michael dot Gogins at gmail dot com On Sat, Jul 11, 2015 at 1:26 PM, Victor Lazzarini <Victor.Lazzarini@nuim.ie> wrote: For OSX, all appears to be as usual, the DMG is the same size as before. ======================== Dr Victor Lazzarini Dean of Arts, Celtic Studies and Philosophy, Maynooth University, Maynooth, Co Kildare, Ireland Tel: 00 353 7086936 Fax: 00 353 1 7086952 > On 11 Jul 2015, at 17:21, Michael Gogins <michael.gogins@gmail.com> wrote: > > I tried to download Csound onto a new WIndows computer from the default installer button n the Csound SourceForge page. The installer is over 200 MB but the dowloaded installer executable was under 1 MB. This made me suspicious. I went to the Files page and started my download from the "direct download" link, and the download (stillcoming down) is already much bigger > > My theory is that SourceForge wraps our binaries in some sort of installer app of their own. Perhaps this makes the dowload more reliable or something, but I am worried that it will bring along with it some sort of adware that it will install without telling me. I think the "direct ink" is the real file. > > Does anyone know anything about this? > > Regards, > Mike > > ----------------------------------------------------- > Michael Gogins > Irreducible Productions > http://michaelgogins.tumblr.com > Michael dot Gogins at gmail dot com > ------------------------------------------------------------------------------ > Don't Limit Your Business. Reach for the Cloud. > GigeNET's Cloud Solutions provide you with the tools and support that > you need to offload your IT needs and focus on growing your business. > Configured For All Businesses. Start Your Cloud Today. > https://www.gigenetcloud.com/_______________________________________________ > Csound-devel mailing list > Csound-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/csound-devel ------------------------------------------------------------------------------ Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on growing your business. Configured For All Businesses. Start Your Cloud Today. https://www.gigenetcloud.com/ _______________________________________________ Csound-devel mailing list Csound-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/csound-devel

Date	2015-07-11 18:39
From	Victor Lazzarini
Subject	Re: [Cs-dev] SourceForge download
	yes, that’s what I used to download, the green download button. ======================== Dr Victor Lazzarini Dean of Arts, Celtic Studies and Philosophy, Maynooth University, Maynooth, Co Kildare, Ireland Tel: 00 353 7086936 Fax: 00 353 1 7086952 > On 11 Jul 2015, at 18:37, Michael Gogins wrote: > > Is there a default download button for the Mac on the main SourceForge page? That's what I'm talking about. It detects your OS and chooses the ddefault dowload for you. Maybe you didn't set the default download for the Mac when the file was uploaded? > > Regards, > Mike > > > ----------------------------------------------------- > Michael Gogins > Irreducible Productions > http://michaelgogins.tumblr.com > Michael dot Gogins at gmail dot com > > On Sat, Jul 11, 2015 at 1:26 PM, Victor Lazzarini wrote: > For OSX, all appears to be as usual, the DMG is the same size as before. > ======================== > Dr Victor Lazzarini > Dean of Arts, Celtic Studies and Philosophy, > Maynooth University, > Maynooth, Co Kildare, Ireland > Tel: 00 353 7086936 > Fax: 00 353 1 7086952 > > > On 11 Jul 2015, at 17:21, Michael Gogins wrote: > > > > I tried to download Csound onto a new WIndows computer from the default installer button n the Csound SourceForge page. The installer is over 200 MB but the dowloaded installer executable was under 1 MB. This made me suspicious. I went to the Files page and started my download from the "direct download" link, and the download (stillcoming down) is already much bigger > > > > My theory is that SourceForge wraps our binaries in some sort of installer app of their own. Perhaps this makes the dowload more reliable or something, but I am worried that it will bring along with it some sort of adware that it will install without telling me. I think the "direct ink" is the real file. > > > > Does anyone know anything about this? > > > > Regards, > > Mike > > > > ----------------------------------------------------- > > Michael Gogins > > Irreducible Productions > > http://michaelgogins.tumblr.com > > Michael dot Gogins at gmail dot com > > ------------------------------------------------------------------------------ > > Don't Limit Your Business. Reach for the Cloud. > > GigeNET's Cloud Solutions provide you with the tools and support that > > you need to offload your IT needs and focus on growing your business. > > Configured For All Businesses. Start Your Cloud Today. > > https://www.gigenetcloud.com/_______________________________________________ > > Csound-devel mailing list > > Csound-devel@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/csound-devel > > > ------------------------------------------------------------------------------ > Don't Limit Your Business. Reach for the Cloud. > GigeNET's Cloud Solutions provide you with the tools and support that > you need to offload your IT needs and focus on growing your business. > Configured For All Businesses. Start Your Cloud Today. > https://www.gigenetcloud.com/ > _______________________________________________ > Csound-devel mailing list > Csound-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/csound-devel > > ------------------------------------------------------------------------------ > Don't Limit Your Business. Reach for the Cloud. > GigeNET's Cloud Solutions provide you with the tools and support that > you need to offload your IT needs and focus on growing your business. > Configured For All Businesses. Start Your Cloud Today. > https://www.gigenetcloud.com/_______________________________________________ > Csound-devel mailing list > Csound-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/csound-devel ------------------------------------------------------------------------------ Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on growing your business. Configured For All Businesses. Start Your Cloud Today. https://www.gigenetcloud.com/ _______________________________________________ Csound-devel mailing list Csound-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/csound-devel

Date	2015-07-11 18:42
From	Michael Gogins
Subject	Re: [Cs-dev] SourceForge download
Attachments	None None
	Hmm... I'll do a little research. Thanks, Mike ----------------------------------------------------- Michael Gogins Irreducible Productions http://michaelgogins.tumblr.com Michael dot Gogins at gmail dot com On Sat, Jul 11, 2015 at 1:39 PM, Victor Lazzarini <Victor.Lazzarini@nuim.ie> wrote: yes, that’s what I used to download, the green download button. ======================== Dr Victor Lazzarini Dean of Arts, Celtic Studies and Philosophy, Maynooth University, Maynooth, Co Kildare, Ireland Tel: 00 353 7086936 Fax: 00 353 1 7086952 > On 11 Jul 2015, at 18:37, Michael Gogins <michael.gogins@gmail.com> wrote: > > Is there a default download button for the Mac on the main SourceForge page? That's what I'm talking about. It detects your OS and chooses the ddefault dowload for you. Maybe you didn't set the default download for the Mac when the file was uploaded? > > Regards, > Mike > > > ----------------------------------------------------- > Michael Gogins > Irreducible Productions > http://michaelgogins.tumblr.com > Michael dot Gogins at gmail dot com > > On Sat, Jul 11, 2015 at 1:26 PM, Victor Lazzarini <Victor.Lazzarini@nuim.ie> wrote: > For OSX, all appears to be as usual, the DMG is the same size as before. > ======================== > Dr Victor Lazzarini > Dean of Arts, Celtic Studies and Philosophy, > Maynooth University, > Maynooth, Co Kildare, Ireland > Tel: 00 353 7086936 > Fax: 00 353 1 7086952 > > > On 11 Jul 2015, at 17:21, Michael Gogins <michael.gogins@gmail.com> wrote: > > > > I tried to download Csound onto a new WIndows computer from the default installer button n the Csound SourceForge page. The installer is over 200 MB but the dowloaded installer executable was under 1 MB. This made me suspicious. I went to the Files page and started my download from the "direct download" link, and the download (stillcoming down) is already much bigger > > > > My theory is that SourceForge wraps our binaries in some sort of installer app of their own. Perhaps this makes the dowload more reliable or something, but I am worried that it will bring along with it some sort of adware that it will install without telling me. I think the "direct ink" is the real file. > > > > Does anyone know anything about this? > > > > Regards, > > Mike > > > > ----------------------------------------------------- > > Michael Gogins > > Irreducible Productions > > http://michaelgogins.tumblr.com > > Michael dot Gogins at gmail dot com > > ------------------------------------------------------------------------------ > > Don't Limit Your Business. Reach for the Cloud. > > GigeNET's Cloud Solutions provide you with the tools and support that > > you need to offload your IT needs and focus on growing your business. > > Configured For All Businesses. Start Your Cloud Today. > > https://www.gigenetcloud.com/_______________________________________________ > > Csound-devel mailing list > > Csound-devel@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/csound-devel > > > ------------------------------------------------------------------------------ > Don't Limit Your Business. Reach for the Cloud. > GigeNET's Cloud Solutions provide you with the tools and support that > you need to offload your IT needs and focus on growing your business. > Configured For All Businesses. Start Your Cloud Today. > https://www.gigenetcloud.com/ > _______________________________________________ > Csound-devel mailing list > Csound-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/csound-devel > > ------------------------------------------------------------------------------ > Don't Limit Your Business. Reach for the Cloud. > GigeNET's Cloud Solutions provide you with the tools and support that > you need to offload your IT needs and focus on growing your business. > Configured For All Businesses. Start Your Cloud Today. > https://www.gigenetcloud.com/_______________________________________________ > Csound-devel mailing list > Csound-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/csound-devel ------------------------------------------------------------------------------ Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on growing your business. Configured For All Businesses. Start Your Cloud Today. https://www.gigenetcloud.com/ _______________________________________________ Csound-devel mailing list Csound-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/csound-devel

Date	2015-07-11 18:44
From	Gareth Edwards
Subject	Re: [Cs-dev] SourceForge download
Attachments	None None
	This is well known - sf.net has been less than harmless for a couple of years: http://arstechnica.com/information-technology/2015/05/sourceforge-grabs-gimp-for-windows-account-wraps-installer-in-bundle-pushing-adware/ https://blog.malwarebytes.org/online-security/2013/11/sourceforge-drives-off-downloads-ask-why/ http://sdtimes.com/sd-times-blog-sourceforge-now-a-source-of-malware/ I won't download from there any more. Gareth On Saturday, 11 July 2015, Michael Gogins <michael.gogins@gmail.com> wrote: I tried to download Csound onto a new WIndows computer from the default installer button n the Csound SourceForge page. The installer is over 200 MB but the dowloaded installer executable was under 1 MB. This made me suspicious. I went to the Files page and started my download from the "direct download" link, and the download (stillcoming down) is already much bigger My theory is that SourceForge wraps our binaries in some sort of installer app of their own. Perhaps this makes the dowload more reliable or something, but I am worried that it will bring along with it some sort of adware that it will install without telling me. I think the "direct ink" is the real file. Does anyone know anything about this? Regards, Mike ----------------------------------------------------- Michael Gogins Irreducible Productions http://michaelgogins.tumblr.com Michael dot Gogins at gmail dot com ------------------------------------------------------------------------------ Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on growing your business. Configured For All Businesses. Start Your Cloud Today. https://www.gigenetcloud.com/ _______________________________________________ Csound-devel mailing list Csound-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/csound-devel

Date	2015-07-11 19:18
From	Michael Gogins
Subject	Re: [Cs-dev] SourceForge download
Attachments	None None
	I did a minor amount of googling and found problems reported for FileZilla, Audacity, VLC, and others. The reports indicate that SourceForge editors have wrapped at least some project installers with their own installer that installs adware, some of it pretty nasty. After many complaints, SourceForge said it stopped doing this. However the download button for Csound on Windows did download a "web" installer for Csound the first few times I tried. My current theory is that SourceForge maintains a script that produces a "wrapped" Web installer whenever the project uploader checks the "default dowload for" box for an upload. Then for at least some projets, adware is bundled into this Web installer. If my theory is correct we can avoid this problem by unchecking all "default" boxes. More info here: http://www.ghacks.net/2015/06/01/sourceforge-adds-and-removes-adware-installers-to-abandoned-projects/. And here: http://www.ghacks.net/2013/07/17/sourceforges-new-installer-bundles-program-downloads-with-adware/. Csound's default download button for Windows does not present the message indicated as a warning of a "wrapped" installer for me now (after I already downloaded from the direct link). I'd be interested to hear from other Windows users The warning sign is said to be the text "Installer Enabled" in the green download button, with a hyperlink to "direct download" just beneath the button. Then when the Web installer runs, it says "SourceForge Installer" in the window. PLEASE NOTE: Right now, there does NOT appear to be a problem (FOR ME) with the default download of the latest Windows installer. However, I am perplexed that my initial downloads behaved differently. I am certain I am not wrong about this. My guess is that SourceForge uses cookies to track failed or canceled downloads, or if the user has selected the direct download, and then offers the direct download in the green button. PLEASE NOTE: I CANNOT SAY there is, or is not, a problem with the Web installer for Csound, since I immediately canceled the installation from the Web installer. Regards, Mike ----------------------------------------------------- Michael Gogins Irreducible Productions http://michaelgogins.tumblr.com Michael dot Gogins at gmail dot com On Sat, Jul 11, 2015 at 1:42 PM, Michael Gogins <michael.gogins@gmail.com> wrote: Hmm... I'll do a little research. Thanks, Mike ----------------------------------------------------- Michael Gogins Irreducible Productions http://michaelgogins.tumblr.com Michael dot Gogins at gmail dot com On Sat, Jul 11, 2015 at 1:39 PM, Victor Lazzarini <Victor.Lazzarini@nuim.ie> wrote: yes, that’s what I used to download, the green download button. ======================== Dr Victor Lazzarini Dean of Arts, Celtic Studies and Philosophy, Maynooth University, Maynooth, Co Kildare, Ireland Tel: 00 353 7086936 Fax: 00 353 1 7086952 > On 11 Jul 2015, at 18:37, Michael Gogins <michael.gogins@gmail.com> wrote: > > Is there a default download button for the Mac on the main SourceForge page? That's what I'm talking about. It detects your OS and chooses the ddefault dowload for you. Maybe you didn't set the default download for the Mac when the file was uploaded? > > Regards, > Mike > > > ----------------------------------------------------- > Michael Gogins > Irreducible Productions > http://michaelgogins.tumblr.com > Michael dot Gogins at gmail dot com > > On Sat, Jul 11, 2015 at 1:26 PM, Victor Lazzarini <Victor.Lazzarini@nuim.ie> wrote: > For OSX, all appears to be as usual, the DMG is the same size as before. > ======================== > Dr Victor Lazzarini > Dean of Arts, Celtic Studies and Philosophy, > Maynooth University, > Maynooth, Co Kildare, Ireland > Tel: 00 353 7086936 > Fax: 00 353 1 7086952 > > > On 11 Jul 2015, at 17:21, Michael Gogins <michael.gogins@gmail.com> wrote: > > > > I tried to download Csound onto a new WIndows computer from the default installer button n the Csound SourceForge page. The installer is over 200 MB but the dowloaded installer executable was under 1 MB. This made me suspicious. I went to the Files page and started my download from the "direct download" link, and the download (stillcoming down) is already much bigger > > > > My theory is that SourceForge wraps our binaries in some sort of installer app of their own. Perhaps this makes the dowload more reliable or something, but I am worried that it will bring along with it some sort of adware that it will install without telling me. I think the "direct ink" is the real file. > > > > Does anyone know anything about this? > > > > Regards, > > Mike > > > > ----------------------------------------------------- > > Michael Gogins > > Irreducible Productions > > http://michaelgogins.tumblr.com > > Michael dot Gogins at gmail dot com > > ------------------------------------------------------------------------------ > > Don't Limit Your Business. Reach for the Cloud. > > GigeNET's Cloud Solutions provide you with the tools and support that > > you need to offload your IT needs and focus on growing your business. > > Configured For All Businesses. Start Your Cloud Today. > > https://www.gigenetcloud.com/_______________________________________________ > > Csound-devel mailing list > > Csound-devel@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/csound-devel > > > ------------------------------------------------------------------------------ > Don't Limit Your Business. Reach for the Cloud. > GigeNET's Cloud Solutions provide you with the tools and support that > you need to offload your IT needs and focus on growing your business. > Configured For All Businesses. Start Your Cloud Today. > https://www.gigenetcloud.com/ > _______________________________________________ > Csound-devel mailing list > Csound-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/csound-devel > > ------------------------------------------------------------------------------ > Don't Limit Your Business. Reach for the Cloud. > GigeNET's Cloud Solutions provide you with the tools and support that > you need to offload your IT needs and focus on growing your business. > Configured For All Businesses. Start Your Cloud Today. > https://www.gigenetcloud.com/_______________________________________________ > Csound-devel mailing list > Csound-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/csound-devel ------------------------------------------------------------------------------ Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on growing your business. Configured For All Businesses. Start Your Cloud Today. https://www.gigenetcloud.com/ _______________________________________________ Csound-devel mailing list Csound-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/csound-devel