Delivery-Date: Sun, 07 Jun 2015 06:58:49 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,T_DKIM_INVALID,T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 874E61E02E5;
	Sun,  7 Jun 2015 06:58:47 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 6F3D135B4F;
	Sun,  7 Jun 2015 10:58:41 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 2A96235B4E
 for <tor-talk@lists.torproject.org>; Sun,  7 Jun 2015 10:58:38 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id cU0aoLUfDVHJ for <tor-talk@lists.torproject.org>;
 Sun,  7 Jun 2015 10:58:38 +0000 (UTC)
Received: from mail-ob0-x231.google.com (mail-ob0-x231.google.com
 [IPv6:2607:f8b0:4003:c01::231])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id F1C7535B4C
 for <tor-talk@lists.torproject.org>; Sun,  7 Jun 2015 10:58:37 +0000 (UTC)
Received: by obbgp2 with SMTP id gp2so58634807obb.2
 for <tor-talk@lists.torproject.org>; Sun, 07 Jun 2015 03:58:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=bentasker.co.uk; s=google;
 h=mime-version:in-reply-to:references:date:message-id:subject:from:to
 :content-type; bh=Nek1jzb960SrHzZFzobWfAwh4V70siqzik/Q0jJ05zA=;
 b=Iaaund61I5lTnS3wMix5R6AoyFEbj9yZQCKAg2fe3H3ndLrNG8AeHNqiIaAWUZStbo
 h/PXRs9u+T/0625yuyz4Yml2p8fcq4JN+6JHb4R2dniMcThzStp1udEfazPHAJFRfT6W
 paPR56xWkOUZs/uADMKLWkZiLy4Kuawu3hNy0=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:mime-version:in-reply-to:references:date
 :message-id:subject:from:to:content-type;
 bh=Nek1jzb960SrHzZFzobWfAwh4V70siqzik/Q0jJ05zA=;
 b=LuYdqNj2ybp77pvkg0upiTLnin0wGrLdgLkMdlwziIw/WjVqG0zWdH17ViHZW6LLR+
 a3mPBPHWZLuEVi5kUFS2QetDZuPMRNZyJLtDgQGynztuS3QmapCVmoFo80E9by6+iBcb
 +vWz4nL49nP+zTOLrwNCAvqlPeRNthT4+3BUEFXGmjrNgGSpoHCwG5HihYjgCmdAYKGI
 pFDPfOrGIHK4/q6+IvWjoHWF0O3I6Gd1vLB55m8Zw5IhdrA+wukf9onkLZsKfxMTleqp
 kr6Or7kufhyV/osZ0PVQlfWKAEux0U8hrKm1RCRNd0/2h5wErJZn/X7F1eo614xCFm7N
 GNkg==
X-Gm-Message-State: ALoCoQk8mzCUOEehSYoG2EKeTq2a9VQ45oJOdS0NRvGTGChe7DtnR0uCE5zcMnz7WUldmeizGtvv
MIME-Version: 1.0
X-Received: by 10.202.192.7 with SMTP id q7mr9628572oif.85.1433674715694; Sun,
 07 Jun 2015 03:58:35 -0700 (PDT)
Received: by 10.76.83.169 with HTTP; Sun, 7 Jun 2015 03:58:35 -0700 (PDT)
X-Originating-IP: [81.134.152.4]
In-Reply-To: <CAOsGNSSs=fYi5_MnmUn-c_VVzCcXy7q+cdVTR5yO0YXFPERE+Q@mail.gmail.com>
References: <5573FCBE.5020203@infosecurity.ch>
 <9af97918aea0615981c1cff7cd248d56@cryptolab.net>
 <CAOsGNSSs=fYi5_MnmUn-c_VVzCcXy7q+cdVTR5yO0YXFPERE+Q@mail.gmail.com>
Date: Sun, 7 Jun 2015 11:58:35 +0100
Message-ID: <CABMkiz5JNmeNFugcGHdNJgTVvei8KhKe8q=AMUv-CeSdaeB8zQ@mail.gmail.com>
From: Ben Tasker <ben@bentasker.co.uk>
To: tor-talk@lists.torproject.org
X-Content-Filtered-By: Mailman/MimeDel 2.1.15
Subject: Re: [tor-talk] "Tor Browsers" on SourceForge
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

> - create competing "projects" on sourceforge - open a new account
> "torproject.org" and upload at least one TorBrowser binary - perhaps a
> stub which points the user to the official web page

Beware of SourceForge's recent behaviour (though they've promised not to do
it without consent again) -
http://www.theregister.co.uk/2015/05/28/sourceforge_accused_of_shackling_gimp_in_kinky_adware/
- if something goes up on SF it needs to be maintained to avoid being
considered abandoned, and in the case of a few projects, wrapped in Adware
by Sourceforge themselves.

It's also potentially tricky getting projects removed once they're there -
http://sourceforge.net/p/easyhtml5/tracinst/Removing%20a%20project/

If it was me, I'd create an official page, with no releases on it, but a
link to the correct location to get Tor from, Sourceforge is not what it
once was...



On Sun, Jun 7, 2015 at 11:40 AM, Zenaan Harkness <zen@freedbms.net> wrote:

> On 6/7/15, Griffin Boyce <griffin@cryptolab.net> wrote:
> > Fabio Pietrosanti (naif) - lists wrote:
> >> Given that there could be sketchy reasons to distribute Tor Browser
> >> unofficially and that Tor it's a copyright of Tor Project, shouldn't
> >> the
> >> Tor Project ask to SourceForge to act to:
> >>
> >> a) Or Remove those project
> >>
> >> b) Or ask to change name and remove any occurrence of "Tor" in the name
> >> of the projects, title, sub descriptions that may lead to misleading
> >> interpretation that "this is tor browser"
> >
> >
> >    Andrew and others have asked for these to be taken down in the past.
> > Most listings are shady and likely contain malware.  I contacted the
> > developer of the first listing last year [1] but he never responded.
> > While SourceForge might not care about malware*, large US-based
> > companies usually care about copyright and trademark violations (which
> > was a solid legal basis for Andrew to request takedown).
> >
> >    I'm not super sure where to go from there though.  This might be a
> > better question for Wendy Seltzer.
>
> Thoughts:
> - contact Bradley Kuhn of the Software Freedom Conservancy
> - contact the Free Software Foundation (USA)
> - create competing "projects" on sourceforge - open a new account
> "torproject.org" and upload at least one TorBrowser binary - perhaps a
> stub which points the user to the official web page
> - write some software to auto-create "projects" on all the commercial
> sites out there, in a single hit, make your code libre licensed of
> course :)
>
> In fact, all existing projects on SourceForge ought (evidently)
> maintain their admin-ship of their existing project pages, just to
> ensure SF does not fuck them over.
>
> Sadly we live in a world of many financial, and other, predators.
>
> Do Not give up control of your SF or GitHub or
> __pick-a-commercial-entity__ project!
>
> If your project gets "mirrored" on one of these types of sites - set
> up your own project just to have an official presence on that site.
>
> This is a sad form of "digital thuggery" which ultimately may need a
> legislative fix - in the meantime, the consequence is more work for us
> (but hopefully minimal) who admin projects.
>
> Good luck,
> Zenaan
> --
> tor-talk mailing list - tor-talk@lists.torproject.org
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
>



-- 
Ben Tasker
https://www.bentasker.co.uk
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

