Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Delete utorrent.rb #29748

Merged
merged 1 commit into from
Feb 3, 2017
Merged

Delete utorrent.rb #29748

merged 1 commit into from
Feb 3, 2017

Conversation

vitorgalvao
Copy link
Member

@vitorgalvao vitorgalvao commented Feb 2, 2017

Refs #6872.

We can assume utorrent is quite popular, but it has also been reported multiple times by multiples sources of containing multiple types of malware (not necessarily at the same time).

We have rules for casks that reportedly bundle malware. While that should mean the casks can stay (and be used at user’s discretion), in this case it seems like a proper uninstall matters more than in other cases. As such, I propose removing it until it is submitted with an acceptable uninstall. It’s not like this is Little Snitch that needs administrator privilegies to install itself and do changes to your system, so it should be feasible.

@Saklad5
Copy link
Contributor

Saklad5 commented Feb 3, 2017

Alternatively, there needs to be a versioned download so we can have a hash of the application.

@Saklad5
Copy link
Contributor

Saklad5 commented Feb 3, 2017

Has anyone considered contacting the uTorrent team about this?

@vitorgalvao
Copy link
Member Author

vitorgalvao commented Feb 3, 2017

Alternatively, there needs to be a versioned download so we can have a hash of the application.

That’s entirely unrelated. If you find an appcast or a versioned download, we can change it, otherwise it stays as is. There’s a reason :latest/:no_check exists.

Has anyone considered contacting the uTorrent team about this?

I’m not sure. They might have when we first discussed the malware on this cask, but I don’t recall. Unless you mean contacting them about the removal from HBC, in which case, yes (though not too hard). Either way, not too keen on trusting a team that has bundled their app with multiple types of malware (and a bitcoin miner!) multiple times.

But if you can get them to at least provide accurate and complete instructions to remove their software (CLI-reproducible and serious, no crap instructions on moving the application to the Trash), we can add those and not remove it.

@reitermarkus reitermarkus merged commit 9afd321 into master Feb 3, 2017
@reitermarkus reitermarkus deleted the del-utorrent branch February 3, 2017 17:18
@miccal miccal removed the discussion label Feb 3, 2017
@Homebrew Homebrew locked and limited conversation to collaborators May 9, 2018
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants