Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Filezilla: Abuse of third-party infrastructure #9179

Closed
codesquid opened this issue Sep 6, 2022 · 2 comments
Closed

Filezilla: Abuse of third-party infrastructure #9179

codesquid opened this issue Sep 6, 2022 · 2 comments

Comments

@codesquid
Copy link

Hello,

the Scoop Installer is abusing the infrastructure at https://filezilla-project.org/ or one of its subdomains. Our infrastructure is meant to be used only by humans and FileZilla itself, not third-party installers. The Scoop installer is even using fake user agents to circumvent abuse prevention.

If you want to re-distribute FileZilla using scoop, you absolutely must host the binaries on your own infrastructure.
For redistribution, please take note of https://filezilla-project.org/license.php and https://filezilla-project.org/trademark_policy.php

Regards,
Tim Kosse

@codesquid codesquid added the bug label Sep 6, 2022
@rashil2000 rashil2000 transferred this issue from ScoopInstaller/Scoop Sep 6, 2022
@rashil2000
Copy link
Member

Hi Tim!

Thanks for letting us know directly. Unfortunately, Scoop does not have any server or storage hosting infra (it is entirely community driven and unfunded). For small packages, we utilize GitHub's repo storage itself, here https://github.com/ScoopInstaller/Binary. We will see if we can put up Filezilla there for Scoop's usage.

/cc @issaclin32

Relevant manifest: https://github.com/ScoopInstaller/Extras/blob/master/bucket/filezilla.json

@rashil2000 rashil2000 changed the title Abuse of third-party infrastructure Filezilla: Abuse of third-party infrastructure Sep 6, 2022
issaclin32 added a commit that referenced this issue Sep 6, 2022
@issaclin32
Copy link
Member

issaclin32 commented Sep 6, 2022

Thank you for telling us.
Our package now uses https://github.com/ScoopInstaller/Binary as the file source.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants