You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@openoffice.apache.org by Linda <sw...@sbcglobal.net> on 2015/08/22 02:56:30 UTC

problems downloading/installing

i want to download your program.
but avast and malware will not let me.
it is saying non malware detected, hardened/block a threat, http://getprofileopener.com/?adprovider=sourceforge_fwint&source=fw36_300x250-download-display-5035814

---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

Re: problems downloading/installing

Posted by Rory O'Farrell <of...@iol.ie>.
On Sun, 23 Aug 2015 06:56:23 +0000
toki <to...@gmail.com> wrote:

> On 23/08/15 06:27, Rory O'Farrell wrote:
> 
> > List members will be aware that one can over-ride the recommendations of a virus scanner, 
> 
> We aren't talking about a virus scanner here.

I was, answering a specific query and attempting to solve a User's problem.   This thread shouldn't have been hijacked by parroting the paranoia of the computer press.

This is my last posting to this thread. 

> 
> We are talking about software that _prevents_ connecting to a site. In
> this instance, it is a blacklist of known distributors of malware.
> 
> I've seen several blacklists of malware domains that added SourceForge
> to their lists in July or August of 2015 --- well after the SourceForge
> blog post announcing their change in policy. Most of these blacklists
> have a policy of requiring "good behaviour" for an extended period of
> time --- usually more than one year --- before being delisted.
> 
> jonathon
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
> For additional commands, e-mail: users-help@openoffice.apache.org
> 
> 


-- 
Rory O'Farrell <of...@iol.ie>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
For additional commands, e-mail: users-help@openoffice.apache.org


Re: problems downloading/installing

Posted by toki <to...@gmail.com>.
On 23/08/15 06:27, Rory O'Farrell wrote:

> List members will be aware that one can over-ride the recommendations of a virus scanner, 

We aren't talking about a virus scanner here.

We are talking about software that _prevents_ connecting to a site. In
this instance, it is a blacklist of known distributors of malware.

I've seen several blacklists of malware domains that added SourceForge
to their lists in July or August of 2015 --- well after the SourceForge
blog post announcing their change in policy. Most of these blacklists
have a policy of requiring "good behaviour" for an extended period of
time --- usually more than one year --- before being delisted.

jonathon

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
For additional commands, e-mail: users-help@openoffice.apache.org


Re: problems downloading/installing

Posted by Rory O'Farrell <of...@iol.ie>.
On Sun, 23 Aug 2015 04:44:08 +0000
toki <to...@gmail.com> wrote:

> 
> 
> On 22/08/15 10:23, Rory O'Farrell wrote:
> > This will redirect to SourceForge servers where the files are stored.
> 
> I realize that this is a really difficult concept to understand, but
> SourceForce is treated as a known distributor of malware, and thus all
> downloads from SourceForge _will_ fail.

List members will be aware that one can over-ride the recommendations of a virus scanner, virus scanners being appplications that frequently differ in their recommentadtions anyway.   In an attempt to answer the original question I did point out two safety precautions - not clicking on any proffered link, and verifying the download against the security checksums, both precautions that to my personal knowledge are effective.

> 
> The solution is to move Apache OpenOffice from SourceForge to a site
> that is not known as a distributor of malware.
> GitHub, for example, would be a good starting point.
> 
> At this stage of the game, I suspect that there is nothing, but nothing,
> that Dice Holdings can do, to get SourceForge removed from the various
> blacklists of known malware distributors.  (If I understood the page I
> was looking it, SourceForge was added to yet another blocklist of known
> malware distributors, last week.)
> 
> > If one is in any doubt about the integrity of a download,
> 
> The issue isn't the integrity of the Apache OpenOffice download, but the
> known lack of integrity of SourceForge.
> 
> jonathon
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
> For additional commands, e-mail: users-help@openoffice.apache.org
> 
> 


-- 
Rory O'Farrell <of...@iol.ie>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
For additional commands, e-mail: users-help@openoffice.apache.org


Re: problems downloading/installing

Posted by John Hart <jh...@testra.com>.
*Update: 06/01 22:37 GMT* by *T <http://www.monkey.org/%7Etimothy/> *: 
The SourceForge blog has a welcome update; SourceForge, it says, has 
effective today "stopped presenting third party offers for unmaintained 
SourceForge projects 
<http://sourceforge.net/blog/third-party-offers-will-be-presented-with-opt-in-projects-only/>. 
... At this time, we present third party offers only with a few projects 
where it is explicitly approved by the project developer, or if the 
project is already bundling third party offers."




On 8/22/2015 9:44 PM, toki wrote:
>
> On 22/08/15 10:23, Rory O'Farrell wrote:
>>> but avast and malware will not let me.
>> Download only from http://www.openoffice.org/download
>> This will redirect to SourceForge servers where the files are stored.
> I realize that this is a really difficult concept to understand, but
> SourceForce is treated as a known distributor of malware, and thus all
> downloads from SourceForge _will_ fail.
>
> The solution is to move Apache OpenOffice from SourceForge to a site
> that is not known as a distributor of malware.
> GitHub, for example, would be a good starting point.
>
> At this stage of the game, I suspect that there is nothing, but nothing,
> that Dice Holdings can do, to get SourceForge removed from the various
> blacklists of known malware distributors.  (If I understood the page I
> was looking it, SourceForge was added to yet another blocklist of known
> malware distributors, last week.)
>
>> If one is in any doubt about the integrity of a download,
> The issue isn't the integrity of the Apache OpenOffice download, but the
> known lack of integrity of SourceForge.
>
> jonathon
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
> For additional commands, e-mail: users-help@openoffice.apache.org
>
>


Re: problems downloading/installing

Posted by Andrea Pescetti <pe...@apache.org>.
Felmon Davis wrote:
> I'm downloading the software from Sourceforge as we speak.
> distinguish:
> Proposition #1: SourceForce is treated as a known distributor of
> malware, and thus all downloads from SourceForge _will_ fail.
> from
> Proposition #2: SourceForge is being added to malware blacklists.

Indeed. Can we have specific examples? Like (this one is a fictional 
example) "If you set the 'Allow download from trusted sites only' option 
in Google Chrome, then OpenOffice downloads will be blocked". This may 
be very useful in evaluating the impact and helping users.

Regards,
   Andrea.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
For additional commands, e-mail: users-help@openoffice.apache.org


Re: problems downloading/installing

Posted by Felmon Davis <da...@union.edu>.
On Sun, 23 Aug 2015, Jim McLaughlin wrote:

> It is sad that you apparently have no concept as to how inane your posts
> are.
>
> By the way, FUD = FEAR, UNCERTAINTY and DOUBT.
>
> Your repeated incorrect assertion that all downloads from SourceForge fail
> is FUD.
>
> Your assertion is untrue.
>
> Please stop spreading the false assertion that all downloads from
> SourceForge fail.

gentlemen, please, be careful of the furniture!

for what it's worth, I'm downloading the software from Sourceforge as 
we speak.

distinguish:

Proposition #1: SourceForce is treated as a known distributor of 
malware, and thus all downloads from SourceForge _will_ fail.

from

Proposition #2: SourceForge is being added to malware blacklists.

f.

-- 
Felmon Davis

"Today, of course, it is considered very poor taste to use the F-word
except in major motion pictures."
 		-- Dave Barry, "$#$%#^%!^%&@%@!"

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
For additional commands, e-mail: users-help@openoffice.apache.org


Re: problems downloading/installing

Posted by Jim McLaughlin <jj...@gmail.com>.
It is sad that you apparently have no concept as to how inane your posts
are.

By the way, FUD = FEAR, UNCERTAINTY and DOUBT.

Your repeated incorrect assertion that all downloads from SourceForge fail
is FUD.

Your assertion is untrue.

Please stop spreading the false assertion that all downloads from
SourceForge fail.

On Sun, Aug 23, 2015 at 10:42 AM, toki <to...@gmail.com> wrote:

> >> SourceForce is treated as a known distributor of malware, and thus all
> >> downloads from SourceForge _will_ fail.*
> >>
> >>
> >
> >
> >
> > * The foregoing italicized paragraph is demonstrably  -- and repeatedly
> > demonstrated as -- UNTRUE.  I routinely and repeatedly download from
>
> If the definition of FUD is something that has been repeatedly
> demonstrated to be true, then yes, it is FUD to say that SourceForge is
> consistently blocked by malware blocklists.
>
>
> However, the usual definition of FUD is something that is not
> repeatable.  And as such, inasmuch as SourceForge is on malware
> blocklists, and those blocklists do block connections, then it is
> absolutely true to say that the download from SourceForge will fail,
> because the connection is not made.
>
> > *Please stop spreading FUD.*
>
> The FUD is your point blank refusal to accept that SourceForge is being
> added to malware blacklists.
>
> jonathon
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
> For additional commands, e-mail: users-help@openoffice.apache.org
>
>

Re: problems downloading/installing

Posted by toki <to...@gmail.com>.
>> SourceForce is treated as a known distributor of malware, and thus all
>> downloads from SourceForge _will_ fail.*
>>
>>
> 
> 
> 
> * The foregoing italicized paragraph is demonstrably  -- and repeatedly
> demonstrated as -- UNTRUE.  I routinely and repeatedly download from

If the definition of FUD is something that has been repeatedly
demonstrated to be true, then yes, it is FUD to say that SourceForge is
consistently blocked by malware blocklists.


However, the usual definition of FUD is something that is not
repeatable.  And as such, inasmuch as SourceForge is on malware
blocklists, and those blocklists do block connections, then it is
absolutely true to say that the download from SourceForge will fail,
because the connection is not made.

> *Please stop spreading FUD.*

The FUD is your point blank refusal to accept that SourceForge is being
added to malware blacklists.

jonathon

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
For additional commands, e-mail: users-help@openoffice.apache.org


Re: problems downloading/installing

Posted by Jim McLaughlin <jj...@gmail.com>.
IN LINE

On Sat, Aug 22, 2015 at 9:44 PM, toki <to...@gmail.com> wrote:

>
>
> On 22/08/15 10:23, Rory O'Farrell wrote:
> >> but avast and malware will not let me.
> > Download only from http://www.openoffice.org/download
> > This will redirect to SourceForge servers where the files are stored.
>
>
>
> *I realize that this is a really difficult concept to understand, but
> SourceForce is treated as a known distributor of malware, and thus all
> downloads from SourceForge _will_ fail.*
>
>



* The foregoing italicized paragraph is demonstrably  -- and repeatedly
demonstrated as -- UNTRUE.  I routinely and repeatedly download from
SourceForge without download failures when downloading to various "flavors"
of Windows systems.*
*Please stop spreading FUD.*

The solution is to move Apache OpenOffice from SourceForge to a site
> that is not known as a distributor of malware.
> GitHub, for example, would be a good starting point.
>
> At this stage of the game, I suspect that there is nothing, but nothing,
> that Dice Holdings can do, to get SourceForge removed from the various
> blacklists of known malware distributors.  (If I understood the page I
> was looking it, SourceForge was added to yet another blocklist of known
> malware distributors, last week.)
>
> > If one is in any doubt about the integrity of a download,
>
> The issue isn't the integrity of the Apache OpenOffice download, but the
> known lack of integrity of SourceForge.
>
> jonathon
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
> For additional commands, e-mail: users-help@openoffice.apache.org
>
>

Re: problems downloading/installing

Posted by toki <to...@gmail.com>.

On 22/08/15 10:23, Rory O'Farrell wrote:
>> but avast and malware will not let me.
> Download only from http://www.openoffice.org/download
> This will redirect to SourceForge servers where the files are stored.

I realize that this is a really difficult concept to understand, but
SourceForce is treated as a known distributor of malware, and thus all
downloads from SourceForge _will_ fail.

The solution is to move Apache OpenOffice from SourceForge to a site
that is not known as a distributor of malware.
GitHub, for example, would be a good starting point.

At this stage of the game, I suspect that there is nothing, but nothing,
that Dice Holdings can do, to get SourceForge removed from the various
blacklists of known malware distributors.  (If I understood the page I
was looking it, SourceForge was added to yet another blocklist of known
malware distributors, last week.)

> If one is in any doubt about the integrity of a download,

The issue isn't the integrity of the Apache OpenOffice download, but the
known lack of integrity of SourceForge.

jonathon

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
For additional commands, e-mail: users-help@openoffice.apache.org


Re: problems downloading/installing

Posted by Rory O'Farrell <of...@iol.ie>.
On Fri, 21 Aug 2015 20:56:30 -0400
"Linda" <sw...@sbcglobal.net> wrote:

> i want to download your program.
> but avast and malware will not let me.
> it is saying non malware detected, hardened/block a threat, http://getprofileopener.com/?adprovider=sourceforge_fwint&source=fw36_300x250-download-display-5035814
> 


Download only from
http://www.openoffice.org/download
This will redirect to SourceForge servers where the files are stored. The selected download will start automatically in about five seconds with no need to click on any other link (DO NOT click on any other link). Your browser may pop up a window asking if it is OK to Save the file. This is correct and you should choose to do this.


If one is in any doubt about the integrity of a download, either that it is complete or to ensure it is clear of viruses/malware, one can check the MD5Sum, which will verify that the file is as it left the code factory.
Details are given in
http://www.openoffice.org/download/checksums.html


-- 
Rory O'Farrell <of...@iol.ie>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
For additional commands, e-mail: users-help@openoffice.apache.org