[aur-requests] [PRQ#12066] Deletion Request for popcorntime

Giovanni Santini (ItachiSan) itachi.sama.amaterasu at gmail.com
Sat Jul 21 13:53:33 UTC 2018


I would like to point out the following facts:
The package I do provide is built from source, based on the code hosted here: https://github.com/popcorn-official/popcorn-desktop (https://link.getmailspring.com/link/1532179678.local-251a76dc-d25e-v1.3.0-fd741eb7@getmailspring.com/0?redirect=https%3A%2F%2Fgithub.com%2Fpopcorn-official%2Fpopcorn-desktop&recipient=YXVyLXJlcXVlc3RzQGFyY2hsaW51eC5vcmc%3D)
You can report found spyware there (can you prove me is there any? A clamscan?)
On my side, I do have no malware:
$ clamscan /mnt/build/archlinux/chroots/bauerbill/popcorntime/popcorntime-0.3.10-8-x86_64.pkg.tar.xz
/mnt/build/archlinux/chroots/bauerbill/popcorntime/popcorntime-0.3.10-7-x86_64.pkg.tar.xz: OK
I could approve on redistributed binary builds, but this is not the case, as users build their package theirselves.

The sources you provide are by far more suspicious, as the website you point to redirect to a Git repository which has as homepage an no-existing one.

The claims provided in the link are quite general; there is no actual proof and the link provided by the 'spyware team', which is:
https://blog.popcorntime.sh/popcorn-time-safety-and-ransomware/ (https://link.getmailspring.com/link/1532179678.local-251a76dc-d25e-v1.3.0-fd741eb7@getmailspring.com/1?redirect=https%3A%2F%2Fblog.popcorntime.sh%2Fpopcorn-time-safety-and-ransomware%2F&recipient=YXVyLXJlcXVlc3RzQGFyY2hsaW51eC5vcmc%3D)
provides by far better description and information.
To finish up, deleting the package is something I wouldn't like to do; I would be glad to switch to another fork, if you can provide me a good one.

Giovanni SantiniComputer scientist and geek
giovannisantini93 at yahoo.it (https://link.getmailspring.com/link/1532179678.local-251a76dc-d25e-v1.3.0-fd741eb7@getmailspring.com/2?redirect=mailto%3Agiovannisantini93%40yahoo.it&recipient=YXVyLXJlcXVlc3RzQGFyY2hsaW51eC5vcmc%3D)
https://giovannisantini.tk (https://link.getmailspring.com/link/1532179678.local-251a76dc-d25e-v1.3.0-fd741eb7@getmailspring.com/3?redirect=%20https%3A%2F%2Fgiovannisantini.tk&recipient=YXVyLXJlcXVlc3RzQGFyY2hsaW51eC5vcmc%3D)

On lug 17 2018, at 8:18 am, notify at aur.archlinux.org wrote:
>
> flacks [1] filed a deletion request for popcorntime [2]:
> Package reportedly distributes viruses/spyware https://www.popcorn-
> time.is/official-statement.html
>
> [1] https://aur.archlinux.org/account/flacks/
> [2] https://aur.archlinux.org/pkgbase/popcorntime/
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.archlinux.org/pipermail/aur-requests/attachments/20180721/b07f0059/attachment.html>


More information about the aur-requests mailing list