General :
K-Meleon Web Browser Forum
Since the latest Sourceforge debacle, has there been any discussion about moving K-M project away from Sourceforge?
Edited 1 time(s). Last edit at 06/11/2015 11:02AM by panzer.
No IMHO. I read most posts. But I do not remember such discussion.
Anyway we cannot look into the mouth of a gift horse. Can we?
He refers to this:
http://www.computerworld.com/article/2931575/open-source-tools/sourceforge-fail-itbwcw.html
The intentional injection of "malware" through downloaders/installers for abandoned/semi-abandoned projects.
Similar to what cnet.com does with its download.com
Yes JohnHell AFAIR info about some irregularities was posted. But I do not recall
"any discussion about moving K-M project away from Sourceforge?"
Edited 1 time(s). Last edit at 06/12/2015 01:02AM by guenter.
I think the question has a beyond "thread"/discussion topic, and it is to ask if there is some kind of interest of moving the project to any other source pages and if this has been discussed "internally".
At least is how I understood his question.
There is quite a huge alarm.
No idea about "internally". No internal contacts.
Wait for a better informed poster. ¬_¬
Edited 1 time(s). Last edit at 06/12/2015 03:02AM by guenter.
Yes, I meant internally.
They don't want to stop with this practise, projects are already leaving and soon freeware reviewers won't allow SF links posted on their pages.
I don't think K-M should be associated with that kind of site anymore. But that just me ...
Edited 1 time(s). Last edit at 06/12/2015 07:22AM by panzer.
Do we have any real alternative?
I think the problem is really overestimated... SF hardly would convert this practice to default one.
Lost reputation is their own problem not our. Most of common users are still very distant from all that controversy.
Some alernatives are mentioned here:
http://helb.github.io/goodbye-sourceforge/
Edited 1 time(s). Last edit at 06/12/2015 12:14PM by panzer.
This is a good discussion. I know Guenter said we should not look a gifthorse in the mouth, but this particular horse just might up and die on us. See this article:
http://fossforce.com/2015/06/sourceforge-not-making-a-graceful-exit/
Does anyone have any insight on how to move K-Meleon? I admit that I do not have a clue about how to move. Are we just one folder with subfolders on their server? Is the "Phorum" software unique to Sourceforge? How much space do we require? Is is possible to just 'back up' K-Meleon somewhere, just for safety reasons?
I wish I had answers, but I am sure that I don't even know all the questions.
No AFAIK the Forum is open Software not unique to SF see: http://www.phorum.org/
AFAIK SF desisted when some projects said NO to bundling theirs with anything.
But my info might be outdated or mistaken.
Anayway: As long as K-Melon is not bundled with anything I have no objection to stay here. I have not noticed anything wrong with K-Meleon downloads recently.
But I might be wrong. I do not download K-Meleon often.
Keeping the project alive has priority. What serves that purpose is ok.
p.s. Exception: Anything Dorian/project deems needed to subsidize things (like dev time, server...) is legitimate. This includs bundling or giving search engine priority to donators.
That is at least my opinion.
Edited 2 time(s). Last edit at 06/15/2015 02:07PM by guenter.
I would have moved already if there was a free alternative to sourceforge
There are some out there, but who knows if they are any good:
http://m.alternativeto.net/software/sourceforge/?license=opensource
Notepad++ leaves SourceForge
It's a good occasion to update web and forum, if the hosting project is changed.
K-Meleon in Spanish
Edited 2 time(s). Last edit at 06/17/2015 02:55PM by desga2.
In case of moving I think that just mirroring is good enough for the first step.
Alternatively, there is no need to move from SourceForge, but there could be needed an additional step required by the user.
ClamWin signs their files with PGP/GnuPG, so a check confirms if they have been modified. In case of ClamWin, no file has been modified by SF to date.
Also, to avoid the step to the user, the installer could request to download the .asc signature file to check validity, and embed in the installer GnuPG along with the K-meleon public key in its store to verify the validity of the installer itself.
Edited 1 time(s). Last edit at 06/18/2015 03:02PM by JohnHell.
Well, as I can see, SF 'hacks' only abandoned projects, which developers decide to move out of this site.
Active (on SF) projects could be involved into 'monetizing' only after their agreement.
So if KM will leave - than it would be 'hacked and packed' with more probability, than if we stay.
Yeah and the earth is a flat disk :cool:
No seriously, it's terrifying, just one more powerful company gone corrupted and evil. After being bought by a hedge fond or whatever that was.
The various articles posted above make it very clear that SF only makes those "claims" but are in no way thruthful anymore. To hijack other programs and even block out the original developers, and to "bundle" their programs with malware without permission - don't open source programs also have a long list of what's allowed and not? Cannot imagine that bundling with malware would be among the allowed use. And to plaster the download pages with all sorts of FAKE download links to malware, claiming to the user those were the desired clean programs, that is openly LYING and BETRAYING.
Have noticed the KM site is now redirected to the external homepage, and wondering if it's mirrored or just somehow linked...
The site is in the same host, but Dorian bought a cooler name :cool:
He just changed a few settings to the DB configs, nothing else. From now, both domains/urls are valid, but redirects to kmeleonbrowser.org.
Get used to it. I think it came to stay
Edited 1 time(s). Last edit at 06/20/2015 02:07AM by JohnHell.
Hmm... must admit haven't downloaded the new KM version yet, was distracted with the sourceforge system, being extremely *distrustful* after all their actions lately.
Now the download popup said KM comes from cznic.dl.sourceforge.net
Hmm, cznic, not KM? May not mean anything...
the statusline says it's just a mirror, oh...
And other mirrors are available too, for over a dozend locations.
Wow - for a brandnew file that's just been uploaded, already spread all over the world... (do they really all have the lastest version??)
Hm, the bottom line of the download page "sourceforge is a DHI service".
DHI - what's that? Clicked the link. Wow...
"DHI. Delivering hire insights" - Huh? Sourceforge??
"We are organizing the world’s talent by providing specialized insights "...
Further down:
"Open Web makes recruiting easier by bringing together publicly available data and by presenting candidate profiles in a way that’s simple for hiring managers to act upon." ...
"We are unlocking employment insights So you can make the best decisions"...
(don't like those allknowing data octopusses, and don't see what sourceforge should have to do with it...)
Ah, further down chapter for each sub company:
"SourceForge is the largest, most trusted (GRRR) destination for Open Source Software discovery and development on the web.
Leader Gaurav Kuchhal, Managing Director
For Technology professionals and enthusiasts around the world
Unique Visitors 33.8 Million Monthly
Page Views 123 Million Monthly
Downloads 150 Million Monthly
2013 Revenues $12 Million
Acquired September 2012 (yeah profit maximizing for hedge fonds)
Offices New York, NY, San Jose, CA and San Francisco, CA
Slashdot.org
is an online community that features technology-centric news and discussion.
The site has been pioneering user-generated content and social discussion since 1997. Knowledgeable, curious, and tech savvy users share and create a broad range of stories, and leave thousands of comments every day.
Leader Gaurav Kuchhal, Managing Director
For Technology professionals around the world
Unique Visitors 2.9 Million Monthly
Page Views 39 Million
Comments per Day 4,650
2013 Revenues $3 Million
Acquired September 2012
Offices New York, NY, San Jose, CA and San Francisco, CA "
Oh well... :-/
Now finally going to download the new KM!
Well, I downloaded the 7z file and everything worked. I ran a scan on my computer and only found some tracking cookies. I always find a few of those.
Â
Edited 1 time(s). Last edit at 03/21/2016 12:20PM by adodupan.
1. I also cannot download the new build that is being shown in its file list.
2. The CVS is back online.
I don't know any alternatives with web hosting.
I could move the rest, but they probably won't be happy.
There isn't much project left at sourceforge
Proof : https://sourceforge.net/p/potm/discussion/vote/thread/bdda4271/
Â
Edited 1 time(s). Last edit at 03/21/2016 12:21PM by adodupan.
General discussion about K-Meleon
Sourceforge
Posted by:
panzer
Date: June 11, 2015 10:49AM
Since the latest Sourceforge debacle, has there been any discussion about moving K-M project away from Sourceforge?
Edited 1 time(s). Last edit at 06/11/2015 11:02AM by panzer.
Re: Sourceforge
Posted by:
guenter
Date: June 11, 2015 06:10PM
No IMHO. I read most posts. But I do not remember such discussion.
Anyway we cannot look into the mouth of a gift horse. Can we?
Re: Sourceforge
Posted by:
JohnHell
Date: June 11, 2015 09:08PM
He refers to this:
http://www.computerworld.com/article/2931575/open-source-tools/sourceforge-fail-itbwcw.html
The intentional injection of "malware" through downloaders/installers for abandoned/semi-abandoned projects.
Similar to what cnet.com does with its download.com
Re: Sourceforge
Posted by:
guenter
Date: June 12, 2015 01:01AM
Yes JohnHell AFAIR info about some irregularities was posted. But I do not recall
"any discussion about moving K-M project away from Sourceforge?"
Edited 1 time(s). Last edit at 06/12/2015 01:02AM by guenter.
Re: Sourceforge
Posted by:
JohnHell
Date: June 12, 2015 01:57AM
I think the question has a beyond "thread"/discussion topic, and it is to ask if there is some kind of interest of moving the project to any other source pages and if this has been discussed "internally".
At least is how I understood his question.
There is quite a huge alarm.
Re: Sourceforge
Posted by:
guenter
Date: June 12, 2015 03:01AM
No idea about "internally". No internal contacts.
Wait for a better informed poster. ¬_¬
Edited 1 time(s). Last edit at 06/12/2015 03:02AM by guenter.
Re: Sourceforge
Posted by:
panzer
Date: June 12, 2015 07:21AM
Yes, I meant internally.
They don't want to stop with this practise, projects are already leaving and soon freeware reviewers won't allow SF links posted on their pages.
I don't think K-M should be associated with that kind of site anymore. But that just me ...
Edited 1 time(s). Last edit at 06/12/2015 07:22AM by panzer.
Re: Sourceforge
Posted by:
rodocop
Date: June 12, 2015 11:31AM
Do we have any real alternative?
I think the problem is really overestimated... SF hardly would convert this practice to default one.
Lost reputation is their own problem not our. Most of common users are still very distant from all that controversy.
Re: Sourceforge
Posted by:
panzer
Date: June 12, 2015 12:14PM
Some alernatives are mentioned here:
http://helb.github.io/goodbye-sourceforge/
Edited 1 time(s). Last edit at 06/12/2015 12:14PM by panzer.
Re: Sourceforge
Posted by:
JamesD
Date: June 12, 2015 05:17PM
This is a good discussion. I know Guenter said we should not look a gifthorse in the mouth, but this particular horse just might up and die on us. See this article:
http://fossforce.com/2015/06/sourceforge-not-making-a-graceful-exit/
Does anyone have any insight on how to move K-Meleon? I admit that I do not have a clue about how to move. Are we just one folder with subfolders on their server? Is the "Phorum" software unique to Sourceforge? How much space do we require? Is is possible to just 'back up' K-Meleon somewhere, just for safety reasons?
I wish I had answers, but I am sure that I don't even know all the questions.
Re: Sourceforge
Posted by:
guenter
Date: June 13, 2015 02:51PM
No AFAIK the Forum is open Software not unique to SF see: http://www.phorum.org/
AFAIK SF desisted when some projects said NO to bundling theirs with anything.
But my info might be outdated or mistaken.
Anayway: As long as K-Melon is not bundled with anything I have no objection to stay here. I have not noticed anything wrong with K-Meleon downloads recently.
But I might be wrong. I do not download K-Meleon often.
Keeping the project alive has priority. What serves that purpose is ok.
p.s. Exception: Anything Dorian/project deems needed to subsidize things (like dev time, server...) is legitimate. This includs bundling or giving search engine priority to donators.
That is at least my opinion.
Edited 2 time(s). Last edit at 06/15/2015 02:07PM by guenter.
Re: Sourceforge
Posted by:
Dorian
Date: June 16, 2015 03:52PM
I would have moved already if there was a free alternative to sourceforge
Re: Sourceforge
Posted by:
panzer
Date: June 17, 2015 07:51AM
There are some out there, but who knows if they are any good:
http://m.alternativeto.net/software/sourceforge/?license=opensource
Re: Sourceforge
Posted by:
desga2
Date: June 17, 2015 02:13PM
Notepad++ leaves SourceForge
It's a good occasion to update web and forum, if the hosting project is changed.
K-Meleon in SpanishEdited 2 time(s). Last edit at 06/17/2015 02:55PM by desga2.
Re: Sourceforge
Posted by:
rodocop
Date: June 18, 2015 01:05PM
In case of moving I think that just mirroring is good enough for the first step.
Re: Sourceforge
Posted by:
JohnHell
Date: June 18, 2015 03:02PM
Alternatively, there is no need to move from SourceForge, but there could be needed an additional step required by the user.
ClamWin signs their files with PGP/GnuPG, so a check confirms if they have been modified. In case of ClamWin, no file has been modified by SF to date.
Also, to avoid the step to the user, the installer could request to download the .asc signature file to check validity, and embed in the installer GnuPG along with the K-meleon public key in its store to verify the validity of the installer itself.
Edited 1 time(s). Last edit at 06/18/2015 03:02PM by JohnHell.
Re: Sourceforge
Posted by:
fred from nl
Date: June 19, 2015 11:15AM
Re: Sourceforge
Posted by:
rodocop
Date: June 19, 2015 02:33PM
Well, as I can see, SF 'hacks' only abandoned projects, which developers decide to move out of this site.
Active (on SF) projects could be involved into 'monetizing' only after their agreement.
So if KM will leave - than it would be 'hacked and packed' with more probability, than if we stay.
Re: Sourceforge
Posted by:
siria
Date: June 19, 2015 06:55PM
Yeah and the earth is a flat disk :cool:
No seriously, it's terrifying, just one more powerful company gone corrupted and evil. After being bought by a hedge fond or whatever that was.
The various articles posted above make it very clear that SF only makes those "claims" but are in no way thruthful anymore. To hijack other programs and even block out the original developers, and to "bundle" their programs with malware without permission - don't open source programs also have a long list of what's allowed and not? Cannot imagine that bundling with malware would be among the allowed use. And to plaster the download pages with all sorts of FAKE download links to malware, claiming to the user those were the desired clean programs, that is openly LYING and BETRAYING.
Have noticed the KM site is now redirected to the external homepage, and wondering if it's mirrored or just somehow linked...
Re: Sourceforge
Posted by:
JohnHell
Date: June 20, 2015 02:05AM
Quote
siria
Have noticed the KM site is now redirected to the external homepage, and wondering if it's mirrored or just somehow linked...
The site is in the same host, but Dorian bought a cooler name :cool:
He just changed a few settings to the DB configs, nothing else. From now, both domains/urls are valid, but redirects to kmeleonbrowser.org.
Get used to it. I think it came to stay
Edited 1 time(s). Last edit at 06/20/2015 02:07AM by JohnHell.
Re: Sourceforge
Posted by:
siria
Date: June 23, 2015 09:42PM
Hmm... must admit haven't downloaded the new KM version yet, was distracted with the sourceforge system, being extremely *distrustful* after all their actions lately.
Now the download popup said KM comes from cznic.dl.sourceforge.net
Hmm, cznic, not KM? May not mean anything...
the statusline says it's just a mirror, oh...
And other mirrors are available too, for over a dozend locations.
Wow - for a brandnew file that's just been uploaded, already spread all over the world... (do they really all have the lastest version??)
Hm, the bottom line of the download page "sourceforge is a DHI service".
DHI - what's that? Clicked the link. Wow...
"DHI. Delivering hire insights" - Huh? Sourceforge??
"We are organizing the world’s talent by providing specialized insights "...
Further down:
"Open Web makes recruiting easier by bringing together publicly available data and by presenting candidate profiles in a way that’s simple for hiring managers to act upon." ...
"We are unlocking employment insights So you can make the best decisions"...
(don't like those allknowing data octopusses, and don't see what sourceforge should have to do with it...)
Ah, further down chapter for each sub company:
"SourceForge is the largest, most trusted (GRRR) destination for Open Source Software discovery and development on the web.
Leader Gaurav Kuchhal, Managing Director
For Technology professionals and enthusiasts around the world
Unique Visitors 33.8 Million Monthly
Page Views 123 Million Monthly
Downloads 150 Million Monthly
2013 Revenues $12 Million
Acquired September 2012 (yeah profit maximizing for hedge fonds)
Offices New York, NY, San Jose, CA and San Francisco, CA
Slashdot.org
is an online community that features technology-centric news and discussion.
The site has been pioneering user-generated content and social discussion since 1997. Knowledgeable, curious, and tech savvy users share and create a broad range of stories, and leave thousands of comments every day.
Leader Gaurav Kuchhal, Managing Director
For Technology professionals around the world
Unique Visitors 2.9 Million Monthly
Page Views 39 Million
Comments per Day 4,650
2013 Revenues $3 Million
Acquired September 2012
Offices New York, NY, San Jose, CA and San Francisco, CA "
Oh well... :-/
Now finally going to download the new KM!
Re: Sourceforge
Posted by:
JamesD
Date: June 24, 2015 01:19AM
Well, I downloaded the 7z file and everything worked. I ran a scan on my computer and only found some tracking cookies. I always find a few of those.
Â
Posted by:
adodupan
Date: July 29, 2015 12:50PM
Â
Edited 1 time(s). Last edit at 03/21/2016 12:20PM by adodupan.
Re: Sourceforge
Posted by:
Zero3K
Date: July 30, 2015 01:34AM
1. I also cannot download the new build that is being shown in its file list.
2. The CVS is back online.
Re: Sourceforge
Posted by:
Dorian
Date: July 30, 2015 03:42PM
I don't know any alternatives with web hosting.
I could move the rest, but they probably won't be happy.
There isn't much project left at sourceforge
Proof : https://sourceforge.net/p/potm/discussion/vote/thread/bdda4271/
Â
Posted by:
adodupan
Date: July 30, 2015 05:02PM
Â
Edited 1 time(s). Last edit at 03/21/2016 12:21PM by adodupan.
English