{"thread":{"id":"49826","subject":"Re: git-scm.com GUI client links","startedAt":"2018-11-13T22:24:16Z","lastAt":"2018-11-13T23:44:00Z","messageCount":2,"participants":["Jonathan Nieder"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"363226","messageId":"20181113222411.GE68106@google.com","threadId":"49826","inReplyTo":"784B3DBC-BE5B-4E7A-A94F-80E5E135195B@alum.mit.edu","subject":"Re: git-scm.com GUI client links","fromName":"Jonathan Nieder","fromEmail":"jrnieder@gmail.com","sentAt":"2018-11-13T22:24:11Z","receivedAt":"2018-11-13T22:24:16Z","isPatch":false,"sender":{"key":"jrnieder@gmail.com","avatar":"https://avatars.githubusercontent.com/u/281595?v=4"},"body":"+cc: git@vger.kernel.org, git-security@googlegroups.com -> bcc\nHi!\n\nPaul J Sanchez wrote:\n\n> Over the weekend I saw a link to a Mac git client I had not seen\n> before:  Aurees.  When I went to the linked site to download a copy,\n> my antivirus software (Sophos) warned me that it contains malware.\n> I immediately threw it away without installing, but figured that\n> git-scm.com <http://git-scm.com/> should be aware of this.\n\nSee https://groups.google.com/d/msg/msysgit/br212yYOZ70/bp5t4QpZk10J\nfor a similar symptom in the past.\n\nSee that thread for some advice on how to track this down.  Sadly,\nmy experience with antivirus software is that it is just not very\nreliable.\n\nThat said, it's possible that this Mac Git client is indeed infected.\nCan you point me to the page where you found it?  The git-scm.com web\nsite is maintained at https://github.com/git/git-scm.com; that page\nhas instructions for contributing to it.\n\nThanks and hope that helps,\nJonathan\n"},{"id":"363233","messageId":"20181113234354.GD226088@google.com","threadId":"49826","inReplyTo":"8D300E52-77C8-462C-BCF2-E1E3BBE261D9@alum.mit.edu","subject":"Re: git-scm.com GUI client links","fromName":"Jonathan Nieder","fromEmail":"jrnieder@gmail.com","sentAt":"2018-11-13T23:43:54Z","receivedAt":"2018-11-13T23:44:00Z","isPatch":false,"sender":{"key":"jrnieder@gmail.com","avatar":"https://avatars.githubusercontent.com/u/281595?v=4"},"body":"+git@vger.kernel.org, git-security@googlegroups.com -> bcc\nPaul J Sanchez wrote:\n> On Nov 13, 2018, at 2:25 PM, Stefan Beller <sbeller@google.com> wrote:\n\n>> The link seems to be https://aurees.com/ ?\n>>\n>> They seem to have\n>> https://aurees.com/legal/license-agreement\n>> which is a hilarious read:\n>>\n>> You agree that each and every e-mail address, which You use during\n>> registration or to commit changes into a Git repository, is\n>> automatically sent to and stored by Nezaboodka for verification\n>> purposes;\n>> You agree with Nezaboodka's and their partners' advertising to be\n>> shown by the Software and to be sent to Your registration e-mail;\n>> You may neither disable nor block automatic updates of the Software;\n>> You may neither disable nor block sending of anonymous usage\n>> statistics to Nezaboodka;\n>> You may download, install and any number of copies of the Software\n>> registered under Free License;\n>>\n>> Further:\n>>   The Agreement is a public agreement (offer) as defined by the law\n>> of Republic of Belarus (article 396 of Civil Code of Republic of\n>> Belarus). This Agreement is governed by the laws of Republic of\n>> Belarus\n>>\n>> ... I did not know English is an official language in Belarus.\n>\n> I saw the link on git-scm.com.com.  You’re correct, the site is\n> https://aurees.com.com/>.\n>\n> And no, I hadn’t yet gotten as far as the license-agreement.  Egad!\n> Total show-stopper.\n>\n> After seeing the licensing terms, I’d agree with Sophos.  Software\n> which harvests my e-mail addresses and usage data and has\n> autoupdates which cannot be disabled or blocked qualifies as malware\n> in my opinion.\n"}]}