{"action":"created","issue":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/1021","labels_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/1021/labels{/name}","comments_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/1021/comments","events_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/1021/events","html_url":"https://github.com/QubesOS/qubes-issues/issues/1021","id":84747064,"number":1021,"title":"Investigate alternative download hosting away from Sourceforge","user":{"login":"mfc","id":1958481,"avatar_url":"https://avatars.githubusercontent.com/u/1958481?v=3","gravatar_id":"","url":"https://api.github.com/users/mfc","html_url":"https://github.com/mfc","followers_url":"https://api.github.com/users/mfc/followers","following_url":"https://api.github.com/users/mfc/following{/other_user}","gists_url":"https://api.github.com/users/mfc/gists{/gist_id}","starred_url":"https://api.github.com/users/mfc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mfc/subscriptions","organizations_url":"https://api.github.com/users/mfc/orgs","repos_url":"https://api.github.com/users/mfc/repos","events_url":"https://api.github.com/users/mfc/events{/privacy}","received_events_url":"https://api.github.com/users/mfc/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/QubesOS/qubes-issues/labels/help%20wanted","name":"help wanted","color":"159818"},{"url":"https://api.github.com/repos/QubesOS/qubes-issues/labels/T:%20task","name":"T: task","color":"cccccc"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-06-03T20:01:07Z","updated_at":"2015-08-08T23:18:33Z","closed_at":null,"body":"Sourceforge has very poor practices:\r\n* http://arstechnica.com/information-technology/2015/05/sourceforge-grabs-gimp-for-windows-account-wraps-installer-in-bundle-pushing-adware/\r\n* http://arstechnica.com/information-technology/2015/06/sourceforge-locked-in-projects-of-fleeing-users-cashed-in-on-malvertising/\r\n* http://arstechnica.com/information-technology/2015/06/black-mirror-sourceforge-has-now-siezed-nmap-audit-tool-project/\r\n\r\nMaybe investigate if the ISO and signature can be hosted on github:\r\n- https://git-lfs.github.com\r\n- https://github.com/early_access/large_file_storage\r\n\r\nHosting the signature on github at minimum might make more sense, and github implements HSTS which is a plus.\r\n\r\nIn a similar vein, I'm going to open an issue on setting up a official torrent file, as Tails and Whonix provide, for an official alternative download mechanism."},"comment":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/comments/129067733","html_url":"https://github.com/QubesOS/qubes-issues/issues/1021#issuecomment-129067733","issue_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/1021","id":129067733,"user":{"login":"mfc","id":1958481,"avatar_url":"https://avatars.githubusercontent.com/u/1958481?v=3","gravatar_id":"","url":"https://api.github.com/users/mfc","html_url":"https://github.com/mfc","followers_url":"https://api.github.com/users/mfc/followers","following_url":"https://api.github.com/users/mfc/following{/other_user}","gists_url":"https://api.github.com/users/mfc/gists{/gist_id}","starred_url":"https://api.github.com/users/mfc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mfc/subscriptions","organizations_url":"https://api.github.com/users/mfc/orgs","repos_url":"https://api.github.com/users/mfc/repos","events_url":"https://api.github.com/users/mfc/events{/privacy}","received_events_url":"https://api.github.com/users/mfc/received_events","type":"User","site_admin":false},"created_at":"2015-08-08T23:18:33Z","updated_at":"2015-08-08T23:18:33Z","body":"Awesome!! So happy.\n\nFor now I recommend not closing the account, but instead just have a\nstub and redirect folks to the current infrastructure / website downloads.\n\nIn the past when projects abandoned sf.net, the sf.net folks took over\nthe project pages and keep hosting the projects but wrapped the\ndownloads with malware (see the Ars Technica articles mentioned earlier).\n\nMaybe they have changed their policies, but maybe redirect folks for a\nwhile just in case folks have hard-linked to the sf.net page at some point.\n\nMarek Marczykowski-Górecki:\n> Everything moved out of sf.net thanks to generous contribution.\n> Should we close sf.net account?\n> \n> ---\n> Reply to this email directly or view it on GitHub:\n> https://github.com/QubesOS/qubes-issues/issues/1021#issuecomment-129065326\n> \n"}}