SourceForge goes full hostile
2015-06-15 17:22:30.76998+00 by Dan Lyke 0 comments
Holy crap: SourceForge has gone full-on hostile. Warning: Don’t Download Software From SourceForge If You Can Help It.
Other developers didn’t actually choose to enable DevShare. GIMP is currently listed as “brought to you by: sf-editor1″ on SourceForge. Click through to sf-editor1’s list of projects and you’ll see quite a few projects hosted by SourceForge itself, from Audacity and OpenOffice to Firefox.
Click through to a project’s official website and you’ll find actual download links. For example, Audacity’s homepage redirects you to FOSSHUB to download Audacity, not SourceForge. But searching for “Audacity” on Google still brings up the SourceForge page as the top result.
And apparently they're detecting runs in VMs and making the installers play nicely there, to foil people who want to gather data on the malware they're installing.