>open source is good!!!!! >you can trust foss!!!!!! >that's

>no source
seems legit

wtf is fosshub?
"official repository"? as in.. apt-get install ?
r u stoopid?

>>55893370
Install qBittorrent.

>fosshub
>official site
And this is why Windows users will always be looked down on as fucking idiots.

>>55893384
>qstalled
lol no thanks

>>55893394
That's the site many projects you worship, such as qbitorrent, do use as their official download link, moron

>>55893370
http://www.ghacks.net/2016/08/03/attention-fosshub-downloads-compromised/

>>55893362
so this is the """""power"""" of the foss ideology I see

>>55893362
oh shit I just downloaded qBittorrent from there today. how fucked am I?

>>55893588
You are fine as long as you don't restart or shutdown your computer again

>>55893588
you aren't. some group hacked audacity and classic shell, but that's it

>>55893605
>>55893606

I feel paranoid now doing a whole system scan now and actually checking the hash.

>>55893606
Also:

Audacity, WinDirStat, qBittorrent, MKVToolNix, Spybot Search&Destroy, Calibre, SMPlayer, HWiNFO, MyPhoneExplorer, IrfanView

>>55893487
But qbittorrent is shit anon.

>>55893637
proof or did you just pull that out of you ass?

>>55893665
Links all over the thread https://www.reddit.com/r/pcmasterrace/comments/4vw21h/massive_psa_do_not_download_classic_shell_read/

The hackers had access to Fosshub so just changed all installers they could with their small exe . The site admin has already reverted it all but it's unknown how many people have downloaded it

Classic shell users are the most affected because the Windows 10 update broke it and made them reinstall from the site

>>55893698

this like linux mint all over again going to reinstall windows just in case.

https://www.youtube.com/watch?v=xF0cGt5-69k

>>55893605
If your computer uses BIOS, make a recovery disc, boot into it and rebuild your MBR. If you use UEFI you shouldn't have anything to worry about, but make a recovery disc just in case.

>>55893362
Should've used your package manager faget

I have literally never heard of FossHub until today. It clearly isn't a primary location to acquire Free/Open Source Software. Just get your shit off of Github or from your package manager's official repository.

>>55893637
Welp. Good thing I never bother updating. Incidentally, when is the payload executed? Will I know I'm fucked before it's too late?

File: 1437315842951.jpg (11KB, 300x268px) Image search: [Google]

11KB, 300x268px

>>55893362
>not downloading everything from the windows store or checking the hashes

>>55893975
>checking the hashes
If they managed to upload a malicious installer they could have easily changed the hashes.

>>55893846
It's a mirror where you download Classic Shell, a pretty popular piece of software even on /g/. There are people on the Classic Shell forums complaining about their computers fucking up

>>55894004
they didn't hack the classicshell website, only fosshub so the hash wouldn't have matched

It's free service so you can't complain!

>>55894030
There are MD5 (lol) and SHA1 hases on the FossHub download page. I couldn't find any hashes on the official Classic Shell website

>>55893394
*lunix

>>55894054
sorry you are right, in the forum thread the classicshell guy did some damage control and said people should have checked the hashes so I inferred they available on his site. anyways only retards would use this bloatware on windows 10 but it shows how shitty windows is. I can't wait until I get my new rig and can finally do kvm/qemu gpu meme passthrough for gaymes

>>55894092
It's really FossHub's fault so don't blame Classic Shell. Classic Shell is pretty good, I use it in 8.1 so i don't have to deal with metro. The dev explains here >>55894088 about his signature and what not

File: 1455748036971.jpg (23KB, 384x384px) Image search: [Google]

23KB, 384x384px

>>55893936
>tfw nowadays it's safer not to update

>>55893936
It's only on the latest version 3.4.0 or whatever

>>55894088

>You may have to reinstall Windows
You do not need to reinstall Windows to repair a fucking MBR.

>>55893394
This

>>55894092
It's a good meme

>>55893362
https://www.youtube.com/watch?v=DD9CvHVU7B4
Anyone else watch danooct or ampdan?

can't you just check the software hash to see if it is what it is

>>55893362
I recently updated qBittorrent on two of my PCs, how do I check if I've been hit?

The original installer was replaced with a 35kb exe. How can you not be suspicious of that before you even hit download let alone install?

>>55894405
reboot

>>55894424
B-but I'm scared senpai

>>55894444
checked.


Im literally laughing out loud at you rn.

>>55894444
You should have regular backup anon-kun.
Don't worry

>>55894444
backup first

>>55893362
The Apple MacBook Pro with Retina Display doesn't have this problem.

>using anything else than rtorrent
You deserve it

>>55894054
The guys that made the hack said that FossHub automatically updates the hashes when a new version is being uploaded. In short, it is only to protect against MITM attacks and not to verify the uploader identity.

>>55894287
The dev said that he doesn't know how to solve this problem. He merely says what answers other users gave him at the board.

>>55894423
Winfags being idiots.

>>55894914
Am I gay if I really do consider buying a mac next time I buy a new computer?

>>55894023
And nothing of value was lost
That's what they deserve for being useless Microsoft drones

>>55894989
yes

but you will fit in with the rest of the people and not provoke by using ubuntu net install with i3

What's the time frame here, how long were the malwares up?

>>55895238
Linux on a PC is it then.

I use chocolatey

>2016
>installing software by downloading an installer from a website
wew lad

>>55893362
>open source is good!!!!!
>you can trust foss!!!!!!
>not compiling from source
That's like having a secure door but leaving it open.

>lincux

when will they learn

>>55895526
are you braindead?

>>55896412
Just microshills in full damage control

>>55893362
who the fuck cares ? it's not like someone is retarded enough to download and install some unsigned binary. you either download the source, or install the binary from your distributions official repo.

If it was on Linux, it would first be packaged by a maintainer, who would spot the malicious function.

Stay mad, Pajeet.