Fosshub что это такое
В результате взлома известного opensource-хостинга были заражены дистрибутивы Audacity, Classic Shell и другие
2 августа был взломан сайт FOSShub. Это бесплатный хостинг, на котором разработчики свободного и открытого ПО размещают свои приложения. Самые известные продукты, которые пользователи скачивают с FOSShub, – это Audacity и Classic Shell. Они набрали 25 миллионов и 15 миллионов загрузок соответственно.
После взлома сайт некоторое время распространял зараженные вирусом версии приложений. Злоумышленники модифицировали их исходный код и загрузили на сервер FOSShub. Установщики (для Windows) программ ClassicShell, qBittorent, Audacity и, возможно, некоторых других были заменены на троян, который затирает MBR, оставляя сообщение от хакерской группы PeggleCrew.
После установки зараженного софта и перезагрузки компьютера операционная система переставала загружаться.
Главная загрузочная запись (англ. master boot record, MBR) — код и данные, необходимые для последующей загрузки операционной системы и расположенные в первых физических секторах (чаще всего в самом первом) на жёстком диске или другом устройстве хранения информации.
Audacity – свободный многоплатформенный аудиоредактор звуковых файлов, ориентированный на работу с несколькими дорожками. Программа была выпущена и распространяется на условиях GNU General Public License. Работает под управлением операционных систем: Microsoft Windows, Linux, Mac OS X, FreeBSD и других.
Пользователям Classic Shell повезло меньше: модифицированный софт успели скачать около 300 человек.
Classic Shell – бесплатный набор утилит с открытым исходным кодом (до версии 3.6.8) для возвращения прежнего вида интерфейса в Windows Vista и выше. Состоит из трех компонентов: Classic Start Menu — позволяет вернуть прежнее меню «Пуск», Classic Explorer — добавляет в Проводник Windows панель инструментов, и Classic IE9 — позволяет настраивать панели в браузере Internet Explorer. Работает как отдельное приложение и не меняет системные настройки.
Для того, чтобы дополнительно обезопасить пользователей, разработчики Classic Shell подготовили инструкцию о том, как проверить операционную систему на предмет заражения. Кроме того, они опубликовали способы решения проблемы в случае, если компьютер заражен и уже перезагружен.
Считается, что на данный момент, 4 августа, все взломанные версии приложений удалены с сайта FOSShub.
Ранее команда PeggleCrew взломала аккаунты Ринго Стар в Twitter, а также НФЛ (Национальная Футбольная лига). От лица лиги они опубликовали ложную информацию о смерти комиссара НФЛ Роджера Гуделла.
Frequently Asked Questions
Please read carefully each answer. If you still don’t find an answer, feel free to use the contact form.
We will not reply to questions found in this area.
Table of Contents
1. I can’t download files from FossHub (Please note: Hotlinking is Not Allowed)
If you click on a download link and the download does not start the most common issue is related to third-party browser add-ons.
When you install specific third-party browser add-ons (e.g., download, privacy), these might disable certain browser functions such as JavaScript.
Solution: the fastest way would be to try a different (clean) browser that you didn’t install any other third-party extensions.
2. How can I add software to FossHub?
3. Why don’t you reply to my emails?
Several reasons:
— You’re sending us a business proposal related to software bundles, installers, pop-ups, aggressive or deceptive advertisement. If we get such emails, we ignore and delete them instantly. Sorry but WE ARE NOT INTERESTED in such partnerships.
— You sent us a question related to a software issue or a bug. Sometimes we reply, but please please note that we don’t offer support for bugs or other problems associated with specific software. Most software titles have a Forum or a place where you can report bugs or any other issues. We don’t have enough time to reply to everyone.
— You provided a fake email, and we are not able to answer. You might be upset with us, but if you wish to receive a response, we still need a way to get in touch with you.
— You’re ignoring a subject that has been covered in this FAQ.
4. Your software is infected
FossHub uses Jotti’s malware scan service. We scan each file we upload automatically, and we also show the file signatures. If you notice a specific file reported as infected, please make sure that we are not talking about a false positive.
We encourage you to upload any suspicious file to:
VirusTotal (https://www.virustotal.com)
Jotti’s malware scan (https://virusscan.jotti.org).
FossHub took all the safety measures to minimize any potential infection or threat, but security is not infallible. We take security seriously so; please report us any potential issue or concern you might have here: https://www.fosshub.com/contact.html
5. I want to report a misleading or deceptive ad
We show a single Google Adsense ad. If you notice any misleading ad, please inform us using the «Report misleading» link or here: https://www.fosshub.com/contact.html
It helps if you send us the URL: right-click on that ad, copy the destination link address, and send it to us.
FossHub does not tolerate misleading ads. We block such ads 24/7/365.
6. I really want to donate to FossHub
If you insist, you can donate by using our «Donate to remove ads» link that can be found on each page. We will use your donation to pay our bills and help a dozen of free projects. Please donate only if you can afford it. We are grateful for any donation, it does help us, but please take care of yourself first. Thank you so much for your help!
7. I would like to help FossHub
Thank you, if you wish to help us, please recommend us to other people on Reddit, Facebook, Twitter, AlternativeTo, 4chan or any other website. Feel free to recommend us to your friends.
8. I have a business proposal for FossHub
Hey, thank you for the kind intention! If you didn’t notice, FossHub *isn’t* money making machine and the easiest way to convince yourself is to look at how many ads we list. It’s just one, and we keep it for a single reason: to help us pay for the free services we provide. FossHub is NOT a business where we squeeze visitors and that’s why when you send us an offer for adding bundles, adding more ads, adding pop-ups or anything else that’s bringing profit but it’s hated by users we do not reply, we merely ignore such emails and most of them are going to spam folder. It is also a form of disrespect to send us such offers (it means that you don’t care and ignoring us) when we clearly state everywhere that we are not interested in such partnerships. Thanks a lot for your understanding!
About Us
No adware, No spyware, No bundles, No malware, Fast downloads, Free services and a single ad.
Most people like us.
The quick version (scroll down for more)
FossHub is a website and also a platform (for developers and projects) where people can download for free many popular free and *clean* software titles. We strive to offer you a fast download experience, a clean website look, easy navigation, only a single ad to help us pay our bills, and no software bundles, adware or anything that can be identified as malware. If you like FossHub, feel free to get in touch with us if you can’t find an answer here or on our F.A.Q. Section.
Important: FossHub lists mostly FOSS software titles, but we also list a few freeware programs. We are also working to offer you more choices so you can filter which kind of programs you would like to see: open source, closed source, or mixed.
FossHub is a part of FOSS (you can read more about F/OSS, FOSS, FLOSS terms here) community focused on providing downloads and hosting for the free projects. We also list a limited number of free software titles that can be categorized as «freeware,» «proprietary,» or «closed-source» software (please read below the «Controversy» or «Manifest» section). We HATE pop-ups, spyware, and excessive ads.
We are against deceptive/misleading advertising and HATE bundles* (READ THE DISCLAIMER SECTION BELOW).
Please note that we do not modify software binaries, and we strive to be recognized as one of the most trustworthy places when it comes down to free software.
Credits
Features
Disclaimer
We (FossHub Team) HATE bundles, «software installers» or any other crap that ruins the reputation of a program.
Some developers will choose to bundle their software or do whatever they want with their work. When this happens, we are not being informed, and we get all kinds of emails from angry users telling us that we provide «crap.» Like everyone else, we consider ourselves regular users, and we feel sad when we read such messages. Most likely, if we receive complaints, we will eventually remove that (PLEASE REPORT IT) project from our website (unless it’s a false positive alert which can happen to any software). Also, if people donate more money to their favorite projects, they would encourage the authors to continue their work and avoid any «temptation» from companies interested in making a profit.
If you feel that somehow we did something wrong, we disappointed you; we encourage you to write to us. Please tell us, give us as many details as possible. If you are right, we will try to follow your suggestion and improve the service we provide.
Manifest
This world has a lot of beautiful people, but this isn’t about them. It is about individuals who have different concerns. From time to time, we get random questions:
— why FossHub asks for donations
— why FossHub delivers malware (is FossHub safe 2020)
— compare us with other download sites
— why the download doesn’t work
— what’s up with this freeware app
We will address each concern.
A. Why FossHub asks for donations
For the same reason, Wikipedia does this OR Ardour, OR most free projects ask for help. We have bills to pay monthly. We have projects to support monthly. It means money, a lot of them, monthly.
The fact that we show a message that can be ignored because you choose not to see ads shouldn’t bother you as long as we do not impose any restrictions.
B. Why FossHub delivers malware
In most cases, there is a false positive. You can read more about false positive alerts here. The only time when FossHub delivered malware for 2 hours was when we got hacked. We made a public statement on Reddit here. It happened once in nearly ten years of our existence, but the truth is that we never, ever had any intention to harm our users, and we hate malware as much as you do.
C. Compare us with other download sites
A few folks said they don’t like the color of our site or that we don’t have many software titles, designs, etc.
The first design we used was made from a free template offered by Andreas Viklund. After this, we hired a few talented web designers that currently work for some famous companies. We think it looks decent and serves the purpose of such a site, and our efforts should concentrate on other things.
As for the software titles, indeed, we don’t have many of them, but we will keep adding those that our users and we consider being valuable. Obtaining permission is the most arduous task, and if you wish to help, you might get permission on our behalf, so please ask us so we can check the software (we DO NOT allow software bundles, adware, malware or anything like that).
All download sites are equal, right? We think not!
Next time you wish to make a fair comparison, take a few signs, and draw your conclusion:
— Do you have to wait for the download to start while they show you ads? (not cool, right?)
— How is the download speed? Do they pay their bandwidth or use an external «free» mirror while you see a bunch of ads?
— Where does the download start? Do they host that file or just a hotlinking while they show you a dozen of ads?
— Does the site need your email address? How many software offers did you receive from them during Christmas, Black Friday, etc.? (spam)
— count the number of ads listed on a site (most sites have like five ads/page, we show a single one and that for a good reason).
— count the number of software titles they list (most sites have 1000+ software titles, do you have time to try all of them in a lifetime?)
— count the number of shareware software and look for affiliate links (monetization is essential, but for some, it is all about the money).
— What is the history of that site? Was it always safe and trustworthy? Yes/No? Again, you might be amazed to realize they don’t even host individual apps.
— «sell» its community for money: we all need money, but sometimes, people go too far—probably lack of principles, greed, or more.
For the reasons mentioned above, we don’t appreciate the fact that you compare us with others. We worked hard to be recognized as a decent download site; we made mistakes for which we will eternally apologize. However, it is a big difference between being stupid, naГЇve, and being evil or greedy on purpose.
*Again, please sure to check our F.A.Q. Section.
Controversy
Certain people accused FossHub of listing several «proprietary» or «closed-source» software. In their opinion, we are not allowed to (or we should not) add certain freeware software titles that are well-known, popular, and safe such as IrfanView (just an example). We believe that they are right up to a point, so we hope you will not judge us by the cover.
FOSS is an acronym. There are plenty of companies, registered trademarks that use it long before the Internet or computers exist.
FOSS or FLOSS is an abbreviation for Free Open Source Software, a term well-known and understood mostly by professionals in the I.T. world.
These professionals adopted the term FOSS/FLOSS, and it means «Free Open Source Software.»
Proof that what we wrote above is accurate and not invented or misinterpreted but rather reality.
Respect for Open Source community is related to a list of actions that we always believed in:
1. Does FossHub provides a list with «Free and Open Source Software»? Yes
2. Does FossHub allow projects and developers to publish the source code of each program? Yes
3. Does FossHub list the file signatures, P.G.P., and other security measures? Yes
4. Does FossHub tries to mislead visitors into thinking that they will find *only* «Free and Open Source Software» published? No
5. Does FossHub publicly recognize that there are a few closed-source software titles listed? Yes
Here comes the most exciting part
6. Does FossHub allow Open Source software to integrate third-party code, often known as bundles, and identified and flagged as adware/malware? NO!
7. Was FossHub ever involved in any action that could harm the Open Source community in any way, shape, or form? NO!
8. Did FossHub go some extra miles to help as much as possible free projects? YES!
Furthermore, we believe in Open Source principles, and that’s why we did the following:
— Offering free services, unlike many others that use Open Source as a masquerade to cover a profitable business.
— We are among the first that banned deceptive/misleading ads, right from the beginning, we lost hundreds of hours doing this (each year) when nobody seems to care.
— We kept a single ad to allow us to pay our bills NOT to make a profit. That was our vision, and we are proud of it.
— We never used bundles, and we kindly asked other Open Source projects to stop this practice.
— We invested in our infrastructure to serve developers and visitors; there is a beautiful story behind this.
I am curious why FossHub is hosting free but closed source software?
Many companies have one or more products they sell and give back to the community by offering an Open Source product. FossHub doesn’t have any sponsor, investor, or another type of finance available to support our costs. A few, free, closed source projects hosted on FossHub help the other Open Source projects by generating revenue that cover some expenses. Once again, the freeware titles that we listed have helped us to pay for servers, bandwidth, and other services.
For your consideration, we have two problems.
A. FossHub, is that it? Trying to hide behind doing good? The famous «do no evil»? Are you trying to justify the listing of those closed source software on FossHub and attempt to change the way Open Source represents or how it works?
Here are some real-life examples, so let’s not pretend that you landed on the evilest website in the world.
1. Corporation A collects your data, knowing everything about you.
2. Corporation B is hacked (usually, they try to hide the incident), and your private information is sold all over the web.
3. Corporation C is cancer for the human race, but you work for it.
Thankfully, corporations A, B, C have the best P.R. experts in the world so no matter what you do or what you say, you don’t matter because you belong to the 0.1% of those who are willing to do something about it, so for them, you are just noise.
Transparency and honesty used to be respected not a long time ago.
Over so many years, we have tried to please everyone, listen to constructive feedback, and improve FossHub. Our ideas to find a consensus regarding the dispute of the «FOSS» acronym was this:
— simply ignore the closed source and search only for Open Source software titles.
— improve our filters so we can allow you to see only Open Source software titles if this is what you wish.
— donate the domain name FOSSHUB.org to a community willing to take care of it in the true spirit of Open Source. Not to a business, not to a corporation.
Some made unreasonable offers, such as:
— register FreeGratisHub or whatever crazy name
— move away the closed source software titles to a different domain name
Please be honest. When was the last time you wrote to a website company that uses FOSS word telling them they are misleading visitors?
The domain name FossHub was the suggestion of a beautiful Open Source developer, and there was a vote in which a dozen projects had to vote between multiple domain names. Our small community voted, and FossHub was the winner.
B. It is about the Open Source code; everyone knows that you can check the code and see if it is safe to use or not!
For an unknown reason, some people think that just because the software is Open Source, it is 100% free, 100% clean, 100% safe and much better than freeware software. In an ideal world, we agree, Open Source is superior.
Unfortunately, the reality is different, take a look at the following:
Open Source and Freeware software that included 3rd party software bundles
Open Source apps or sites can be hacked and deliver malware.
Open Source could mean only the source code is available for binaries you need to pay
Note: Those are just a few random examples, the point is: what does this tell you? Except for license agreement terms and the message, comfort, liberty that Open Source brings, it doesn’t necessarily mean the product is superior, safer* or better.
*Open Source is supposed to be safer because you can analyze the source code while in closed source code, you can’t do that. Still, most people are not able to inspect the code and tell if it is safe or not; they have to rely on other people with such skills (programmers, security experts) or antivirus products that can detect malicious code. For more safety, you are advised to download and compile your source code, but most people will most likely download the binaries and install the program.
Imagine for a second if Bruce Schneier (a renowned security expert) would create a closed source software. Would you trust him? We would, in the same way, Bruce Schneier, trust a closed source program: **»BitLocker is Microsoft’s native file encryption program. Yes, it’s from a big company. But it was designed by my colleague and friend Niels Ferguson, whom I trust.»
**The above statement was copied from the original article «Encrypting Windows Hard Drives» written by Bruce Schneier:
In the same way, we have confidence in other people such as Irfan Skiljan (author of IrfanView, a popular software developed since 1996) and others like him.
The point is; humans make the difference here. A closed source can be as good as Open Source in particular circumstances***
***What particular circumstances? An example: there is no alternative to an Open Source software. No one is willing to inspect the code of a free project, so you really can’t tell if it is safe or not unless you can read the code or else you have to rely on an anti-malware tool. Etc.
If you hate us, except for listening to your feedback and attempt to improve, there isn’t much we can do.
When it comes to Open Source, our conscience is clean, our actions are neat, and the free service we provide is fast, stable, and reliable. Quite a miracle if you get to compare our resources with the large players. The miracle is possible because of the beautiful community of projects and our generous visitors. Our gratitude and recognition go to all of them; thank you!
If you like what we do, please recommend us to others: friends, family, other projects, etc.
Взлом сервера Fosshub и замена установщиков популярных программ на затирающий MBR троян
2 августа был взломан сайт Fosshub и установщики (для Windows) программ ClassicShell, qBittorent, Audacity и, возможно, некоторых других были заменены на троян, который затирает MBR, оставляя сообщение от хакерской группы PeggleCrew.
Ещё вчера автор новости наткнулся на Fosshub на поддельный установщик qBittorent для Windows, так что рекомендуется пока не использовать Fosshub для загрузок.
Информацию по восстановлению можно найди здесь и здесь.
Это место, куда кидают бедные FOSSовщики кидают установщики для винды и осьдесять, так как ни там, ни там нет православных репозиториев.
По возможности используйте двухфакторную авторизацию, но не по СМС
Под видом свободных программ распространяется малварь.
Ну, мне кажется, что qBittorent популярнее transmission.
Под виндой? Возможно. Во всяком случае в Xubuntu — transmission by default, qBitTorrent пробовал — чем-то не понравилось, снёс. Ну и на маках, говорят, трансмиссия очень популярна.
А зачем их куда то кидать если есть оф сайт?
Внезапно оффсайт кидает при попытке скачивания на всякие говносайты.
омг, перечитай мой пост еще раз
его обычно держат как официальный источник
Ага, с невозможностью что-то скачать без правильного ‘Referer’ в HTTP headers. Зашибись официальный источник.
Это ещё что, джабу без правильной куки в заголовках не скачать. Сайт оракла кажется не совсем левый.
Естественно я обновляю джабу wget’ом и это работает. Прямых ссылок сейчас ещё поискать в сети. Потому что трафик, геолокация, всё вот это.
У oracle jdk/jre хитрая лицензия (BCLA), и они хотят явного акцепта этой лицензии. Копирастия, сэр.
а под слакой^W вайном это работает?
хз, вроде с официального сайта и перенаправляло
Даже виндузятники до такого рабства еще не докатились.
зато маководы с удовольствием покупают гуёвые обёртки для скриптов по 10 и более баксов, философия
Ололо, а ещё вчера они говорили про пакетный менеджер, ололо, даже забивали на тот факт, что это консольный магазин приложений, де-факто, олололо.
Что за поток сознания?
Я не могу сказать, ибо закон нн даёт.
Ага, и если взломали то заразят сразу все что там лежит. Удобно.
А если машина с разметкой GPT, загружается через UEFI?
О это занятно. Вот на лоре нашел: Решето! или пользуйтесь нормальными IM но вроде еще были посты на эту тему
был взломан сайт Fosshub и установщики (для Windows) программ ClassicShell, qBittorent, Audacity
Что эта новость тут делает? Пусть вендузятники страдают.
Скачать что ли. Посмотреть хоть.
оно вроде и GPT трёт, детский сад короче в стиле угадай в какой руке конфетка
Где скачать? Под wine работает?
зато маководы с удовольствием покупают гуёвые обёртки для скриптов по 10 и более баксов, философия
оф. сайт qbittorrent предлагает скачать установщик с фосхаба
Запускать от админа неподписанные исполняемые файлы
2016
Я не знаю как там за бугром, но иногда всплывают новости про то как у некоторых российских операторов (чаще всего зашкваривается яйцо) сотрудники проворачивают нехорошие дела, имея доступ к текстам СМС. У друга полгода назад обчистили КИВИ. При том симка была вставлена в тупую звонилку, так что ни о каких ведройдо-троянах речи быть не могло. Просто сначала пришла СМС с кодом для смены пароля, а затем с кодом для подтверждения списания средств и наконец уведомление об успешной операции (трояну для ПК не нужно менять пароль + он бы не получил коды из СМС, а без них операции не прошли бы, в случае взлома самого КИВИ опять же не нужно менять пароль, да и СМСки бы не приходили бы). Всё произошло слишком быстро, чтобы адекватно среагировать. С тех СМС подтверждениям я не доверяю и поспешно отвязал номер телефона от гугловской учётки. А он мне периодически напоминает, что надо его привязать «для усиления безопасности», но, к счастью, пока можно отказаться.
ещё есть несознательные «нехорошие» солдаты (по призыву и не только) несущие службу на определённых постах (перехвата и местоопределения) с доступом к содержанию смс-ок, переговоров и т. п., и вот они порою, в нарушении всего и вся, используют полученную информацию в личных целях
//в Астрахани тем более (в смысле намекаю на географическое положение)
Помимо торрентов и Audacity, ConEmu хостится там. В целом это печально.
Недоработали ребята. Нужен троянец, который винду на ubuntu меняет.
Так это бага просто. Планировалось делать так, как ты написал.