Ublock classifies many well-known open source software sites as badware risk ?

[LucMtl63]

Hello, long term user of Ublock here, I'm surprised to find that recently Ublock started to block access to many well-known open source software sites, calling them badware risks.

Here's some current extract from ublock-badware :

||audacity.de^$doc
||7zip.es^$doc
||7zip.fr^$doc
||7zip.it^$doc
||adblock.fr^$doc
||audacity.es^$doc
||audacity.fr^$doc
||audacity.it^$doc
||audacity.pl^$doc
||blender3d.es^$doc
||blender3d.fr^$doc
||celestia.es^$doc
||celestia.fr^$doc
||freefilesync.com^$doc
||gimp.es^$doc
||inkscape.es^$doc
||inkscape.fr^$doc
||inkscape.it^$doc
||scribus.fr^$doc
||scribus.it^$doc
||stellarium.es^$doc
||stellarium.fr^$doc

I found out about it trying to access scribus.fr

What's going on ?

Thanks.

[stephenhawk8054]

scribus.net is the official site. scribus.fr is not.

@MasterKia @Yuki2718 But I think we should not block unofficial site if they use official site's links to download? We should only block the ones that use other hosts for downloading.

[LucMtl63]

Yes, or maybe just blocking the other hosts download links. These pages have no malicious intent, and they provide information about the software in languages not necessarily supported by the official site, which is the case for Scribus for example.

Thanks for your answer.

[MasterKia]

But I think we should not block unofficial site if they use official site's links to download? We should only block the ones that use other hosts for downloading.

We can't keep monitoring whether they'll one day decide to change the links and distribute malware.
This has happened before with revanced.io , revancedextended.com and Fitgirl repacks:

Ideally there should be a big disclaimer on top of the site to let the user know that this site is not official.

---

The block for scribus.fr is $doc, so users can still proceed to the site if wanted.
For sites that point to the official links, maybe we could use $doc and for other sites we'd use $all.

[stephenhawk8054]

We don't need to monitor the sites. I think it's better to block when there are reports of them. That way we can also have issues references for future as well. Otherwise, I don't know how to respond to the complaints when the references are about other sites/services.

[Yuki2718]

These pages have no malicious intent,

Happy if you or anyone investigate which ones don't and thus can be removed from the list, as some of them indeed distribute malware as shown in the VT link in the comment.