Slashdot Mirror


Google Code Deprecates Download Service For Project Hosting

New submitter c0d3g33k writes "Google Project Hosting announced changes to the Download service on Wednesday, offering only 'increasing misuse of the service and a desire to keep our community safe and secure' by way of explanation. Effective immediately, existing projects that offer no downloads and all new projects will no longer be able to create downloads. Existing projects which currently have downloads will lose the ability to create new downloads by January 2014, though existing downloads will remain available 'for the foreseeable future.' Google Drive is recommended as an alternative, but this will likely have to be done manually by project maintainers since the ability to create and manage downloads won't be part of the Project Hosting tools. This is a rather baffling move, since distributing project files via download is integral to FOSS culture."

55 of 185 comments (clear)

  1. So, "Don't Be Evil..." by CanHasDIY · · Score: 4, Interesting

    Becomes, "Don't Be Open."

    This is a rather baffling move, since distributing project files via download is integral to FOSS culture."

    Considering the recent spate of incidents involving Google taking a shit on the FOSS community that helped to create it, I don't find it baffling at all.

    Google is finally turning into the dickhead actor who got rich and forgot who his real friends are.

    --
    An enigma, wrapped in a riddle, shrouded in bacon and cheese
    1. Re:So, "Don't Be Evil..." by Luthair · · Score: 5, Informative

      Github also had to discontinue file downloads for the simple fact that people abused it and used the service as a way to distribute content unrelated to the open source material.

    2. Re:So, "Don't Be Evil..." by cheesybagel · · Score: 3, Insightful

      Any public file sharing system is liable to be abused period. This includes version control systems. It is no excuse for yanking the service. FWIW I have never seen people abuse either of those services for file serving.

    3. Re:So, "Don't Be Evil..." by larry+bagina · · Score: 5, Funny

      They're pushing google drive for downloads. That makes sense on a couple levels -- forced encouragement of google drive and removing redundant functionality -- but this is google so you have to wonder what's next. So... what is next? Will you need to login with google+ to download? Maybe click a few adds before your download begins? Auto download Chrome for you, just in case?

      --
      Do you even lift?

      These aren't the 'roids you're looking for.

    4. Re:So, "Don't Be Evil..." by EvilIdler · · Score: 2

      No. GitHub uses, as the name implies, Git. You git clone the source code :) People will just have to get used to hosting binaries on some other site, though. Just look at how quickly Flickr got a workaround to allow any file (you can find it on GitHub, incidentally).

    5. Re:So, "Don't Be Evil..." by chris_mahan · · Score: 5, Interesting

      Can't use google drive from work.

      --

      "Piter, too, is dead."

    6. Re:So, "Don't Be Evil..." by Anonymous Coward · · Score: 2, Informative

      Github used to have an API that would allow you to upload & host arbitrary binary blobs and make them available from your project's download page. They discontinued THAT service, because people were abusing. And probably, causing a lot of expense in disk, file server, and bandwidth costs for github.

      You can still create git repositories, and clone them, and upload and share code, etc. etc. etc. You just can't upload arbitrary binary files and redistribute them via github. For projects that want to redistribute binaries of some form as part of their project, github recommends use of CloudFront or Amazon S3 or similar "cloud storage" services, which you can add links to on your project page if you wish.

      Github doesn't need to host 50GB of your best porn (creatively named Project-1.0.0.zip) and saves money on all that excess storage and bandwidth, and you still have plenty of options for legitimate hosting needs. This allows github to not waste money on being a file transfer service, and instead, build their core services.

    7. Re:So, "Don't Be Evil..." by DragonWriter · · Score: 4, Informative

      Any public file sharing system is liable to be abused period. This includes version control systems.

      (1) Version control systems, unlike file downloads, are central to the purpose for which Google provides Google Code, to wit, facilitate developer-to-developer collaboration on open-source projects.
      (2) Version control systems, unlike file downloads, are not particularly widely abused for hosting malware to be distributed through emailing deceptive links to unsophisticated users.

    8. Re:So, "Don't Be Evil..." by Anonymous Coward · · Score: 4, Funny

      Would be quite popular, I imagine. All that forking, pushing and pulling!

    9. Re:So, "Don't Be Evil..." by DragonWriter · · Score: 4, Interesting

      How are people abusing Google Code?

      Using the file download hosting feature to host malware and sending emails with deceptive links to that malware to distribute it to unsuspecting users seems to be one of the main abuses.

    10. Re:So, "Don't Be Evil..." by shutdown+-p+now · · Score: 2

      There's. No. Such. Thing. Period.

    11. Re:So, "Don't Be Evil..." by Anonymous Coward · · Score: 5, Informative

      I suspect you may have misunderstood how one would actually abuse this.

      I email you (or, say, your mom) a link saying Malwarebytes v.10 is now available for download, and it fixes a critical vulnerability and needs to be updated soon or you're at risk. Go to code.google.com/malwarebytes , a project that I've created. I might even populate it with something looking like code that would match, to trick people who are more technical than they really are.

      A non-technical user may see that it's it's hosted at Google, and, having some trust for them, they choose to download. Your prompt shows up (what that accomplishes I don't know, so I assume the user, already intent on downloading it, answers it.)

      So, by your second rule, they download MalwareBytes.zip, which contains MalwareBytes.exe (actually malware), and voila. 0wned.

  2. And no one was surprised by Anonymous Coward · · Score: 5, Insightful

    Google seems to be in a "Fuck everything I've ever done!" phase.

  3. So? by Anonymous Coward · · Score: 5, Informative

    Github did exactly the same thing quite some time ago, and people didn't complain too much. Why is this a big deal?

    1. Re:So? by AlphaBro · · Score: 2, Interesting

      Thousands of people go to my Google Code download page to get the latest versions of my software without having to worry about compiling it. This is shitty.

    2. Re:So? by cheesybagel · · Score: 2

      Because it is a crap policy. A lot of people will want binaries or packages rather than download source code. Many people do not even have a versioning system installed or will want to download the latest stable source code rather than muck around with an unstable internal development milestone.

    3. Re:So? by pmontra · · Score: 2

      Sourceforge has software downloads. You might consider moving your project there.

    4. Re:So? by Rakishi · · Score: 4, Informative

      People did complain. Amusingly, the biggest counterpoint was that if you want to offer downloads you should probably use google code which is much more user (rather than programmer) friendly.

    5. Re:So? by AlphaBro · · Score: 2

      I actually moved all my projects from Sourceforge to Google Code a while ago. SF felt antiquated, sluggish, and unstable; features as simple as the download counter broke all the time. If this is really what's to become of GC, I'll probably head to CodePlex since it feels cleaner than SF and has TFS support.

    6. Re:So? by EvanED · · Score: 3, Insightful

      Amusingly, the biggest counterpoint was that if you want to offer downloads you should probably use google code which is much more user (rather than programmer) friendly.

      That's pretty much my view too.

      The way I looked at things was that Google Code and SourceForge are a lot more centered around what an end user would want to see (either someone who has no idea about version control and coding, or for a library or something like that even a programmer but who just wants to grab a library to use) while GitHub is a lot more centered around what developers who are actually working on a project want to see.

      I mean, just think about what the landing page is: on Google Code you get a page with a description of the project and clear, standardized links to the downloads and documentation, and you have to follow a couple (still standardized) links before you're at the code. On GitHub, pretty much the most prominent thing you see when you go to a project page is the directory listing; it even appears above whatever README is present (if any).

      Dropping support for a quick and easy download from the former is a lot more baffling of a move than dropping it from the latter.

    7. Re:So? by LordLimecat · · Score: 2

      Because this is slashdot, and it has become hip to point at any curating or reducing of their free services as violating "dont be evil".

    8. Re:So? by Orphis · · Score: 2

      Nothing prevents you to put a link to the binaries on your website. And if you can't afford a to host a website, there are still file hosting service happy to finally get some legal files.

      Also, you know, there were some malware abusing the system and downloading some files on some popular legitimate projects ( http://news.softpedia.com/news/New-TDL-Malware-Variant-Uses-Chromium-Embedded-Framework-339791.shtml ). I don't know many projects affected beside this one and I'm sure Google knows better and this move wasn't just to mess around with legitimate users and reduce the costs.

    9. Re:So? by larry+bagina · · Score: 3, Funny

      It's like Barack Obama says - "you didn't build that". Providing pre-compiled software is dangerous since it teaches people that FREE Software and Open Source are about price. I don't provide pre-compiled binaries or documentation for my code. I also intentionally leave in some easy to fix bugs. My users need to edit and compile the source code to run it. My users need to read the source code to understand the cryptic error messages. That's the only way they'll truly appreciate Open Source software.

      --
      Do you even lift?

      These aren't the 'roids you're looking for.

    10. Re:So? by Nerdfest · · Score: 2

      I believe SourceForge is working on updating their site. I seem to also remember them looking for volunteers.

    11. Re:So? by Aaden42 · · Score: 3, Insightful

      RMS, is that you?

      Not sure what domain your project is in, but unless your target market is "Linux, Emacs users who know C" odds are you're cutting a goodly number of potential users out with that attitude. Certainly there are tools that is appropriate for, but the VAST majority of users don't have a compiler on their systems, much less know how to use one.

      Is that a tragedy of the Microsoft-ocracy keeping the world closed for users? I don't think so. [Car analogy coming up] Just because I could technically acquire all of the tools and knowhow to replace any particular part on my car, doesn't mean it's the best use of my money and time to do so. Even if the tools were all free (as in the case of GCC et al.), it's unlikely that it would be in the best interests of a non-techy to take the time to learn to use them, much less learn to troubleshoot them when `./configure && make && make install` doesn't go according to plan. To many people, computers are just tools to get other non-computer related work done, and there's nothing wrong with that. Some people like to tinker with their cars, others just want to drive to work and park them.

      Even a user who doesn't know how to fix bugs & recompile can be a useful asset to an Open Source project. I've found that some of my non-technical users are the most details oriented when it comes to finding edge case bugs and documenting what it takes to reproduce them. Often enough those are the kinds of bugs that take me two minutes to fix but would have taken hours to track down if not for a complete reproducer reported by a user.

      As far as giving people the wrong idea about Free Software, which is worse: Users thinking Free Software is about the price or that it's unusable junk that only nerd/hacker/terr'ists actually use? I've already read articles where less-than-savy authority/law enforcement types have considered simply having Linux installed on a system as evidence of criminal activity. Making Free Software cryptic and difficult to use (neigh unto impossible for certain groups of users) certainly doesn't advance the cause any.

    12. Re:So? by matrim99 · · Score: 2

      A true vanguard. You rock!

      In order to help your users even further, you may want to think about devolving your app to just pseudo-code. I'm sure that your choice of programming language has given pause to many upcoming Logo programmers out there.

      --
      Right. No, your other right. No, the other other right.
    13. Re:So? by FireFury03 · · Score: 2, Interesting

      Nothing prevents you to put a link to the binaries on your website. And if you can't afford a to host a website, there are still file hosting service happy to finally get some legal files.

      Also, you know, there were some malware abusing the system and downloading some files on some popular legitimate projects ( http://news.softpedia.com/news/New-TDL-Malware-Variant-Uses-Chromium-Embedded-Framework-339791.shtml ). I don't know many projects affected beside this one and I'm sure Google knows better and this move wasn't just to mess around with legitimate users and reduce the costs.

      Google seems to be cutting lots of services in the name of abuse...

      Google Code downloads gone because they were being abused.
      XMPP federation gone because it was being used by spammers.
      CalDAV gone because... well, that one just seems to be because its open and Google wants to push everyone to their proprietary APIs instead.

      I'm just waiting for them to pull the plug on email federation with Gmail and Google web search because they both get used by spammers too...

      Guess what; pretty much any useful service is going to get abused - its an ongoing battle to reduce abuse whilst keeping the service useful and if Google are going to pull the plug on everything that might be abused they may as well give up and wind up the company now... (FWIW, I see a lot of spam email originating from real gmail accounts or using gmail accounts as contact addresses for replies; also a lot of phishing emails that use Google Docs to collect responses).

    14. Re:So? by Anonymous Coward · · Score: 5, Funny

      I prefer avoiding pseudocode altogether, wouldn't want users to get too comfortable. i prefer this approach - a single source file with these contents:

      File name: AwesomeSoftware.cpp
      /*

              don't forget #include the stuff your software will need to compile and run!

              enter your code below in proper C++ syntax. It should do what you need.

              If you don't know what to write, you should probably go read lots of books
              and take a 4 year undergraduate program in Computer Science. Then
              maybe you won't be such a fucking retard, luser. I don't work for you, and
              I sure as shit am not getting paid by you.

              This file is licensed using GPLv3.

      */

      I like to then provide a makefile with these contents:

      # Make sure you have no errors in your file before you attempt to build!
      all :
                @ echo "Compiling your shit."
                g++ AwesomeSoftware.cpp -o AwesomeSoftware
                @ echo "Cleaning up!"
                rm -f AwesomeSoftware.cpp

      I find this to be the best way to spread the good word of open source and teach people good development practices.

      God Bless Richard Stallman. God Bless Linus Torvalds.

  4. Re:in future news by Desler · · Score: 5, Informative

    Github did the same thing last year.

  5. Github did this recently by oGMo · · Score: 5, Informative

    Github did this recently too which was annoying, because it was useful. They're not entirely clear why ... "confusing" doesn't seem nearly as likely as "abuse", though I am not aware of any abuse in particular. Since Google is providing Drive as an alternative, and not even immediately removing the service for those using it, it's not even as bad as Github's move, which removed it for everyone. I suppose it's an opportunity to cut another Google dependency though if you really want.

    --

    Don't think of it as a flame---it's more like an argument that does 3d6 fire damage

    1. Re:Github did this recently by cheesybagel · · Score: 3, Insightful

      True. But Google Drive is not exactly known for easy to read URLs.

    2. Re:Github did this recently by Anonymous Coward · · Score: 5, Funny

      True. But Google Drive is not exactly known for easy to read URLs.

      What are you talking about, [USER_TYPE:HUMAN UNIT:670288]? [LINE FEED] Values derived from hash functions of sufficient length are superior sorting and indexing mechanisms for long-term persistence of non-volatile data structures. The use of values that map directly to integers provide search efficiency of big-O-one as opposed to [STRING] searching, which is typically big-O-log-n or worse. You, [USER_TYPE:HUMAN UNIT:670288], must have a malfunction in your [LOGIC-PROCESSING DESIGN] and must obtain maintenance before further conversation can be attempted reliably. [END COMMUNICATION]

    3. Re:Github did this recently by EmperorArthur · · Score: 2

      You sir/madam/machine/thing have won several internets.

      If you would like, I have a recently widowed Nigerian prince who will send them to you.

      --
      So lets pretend that we've just completed writing this code, as opposed to having just completed sabotaging it -Altera
    4. Re:Github did this recently by the+eric+conspiracy · · Score: 2

      CMM LEVEL RATING -2 LUNATIC

  6. Only affects Google hosting? by icebike · · Score: 4, Interesting

    I know more than a few projects using code.google.com that have downloads from a separate server, perhaps to get around some inconvienences already built into the system.

    Maybe the cost of bandwidth is getting to be significant, or maybe it is due to abuse. The announcement seems to suggest people were creating projects just to distribute large files, probably copyrighted material, (and possibly malware), and getting Google to host it for free.

    Still, if you have to set up two or more different services to host your project, why would you bother with the one that didn't allow project downloads? What would be the point of using that on a community project? It would seem this would drive the community away. Perhaps this telegraphs the death knell for yet another Google service?

    --
    Sig Battery depleted. Reverting to safe mode.
  7. what's wrong with the command line by pouar · · Score: 2, Interesting

    just use
    svn checkout enter-url-here
    It's how I download everything from google code, and for github I use git. or is the command line "too ancient" to use anymore?

    --
    while :;do if windows sucks;then mv windows /dev/null;pacman -Sy linux;fi;done
    1. Re:what's wrong with the command line by Anonymous Coward · · Score: 2, Insightful

      Because end users don't have SVN?

    2. Re:what's wrong with the command line by Todd+Knarr · · Score: 5, Informative

      Because the average user doesn't want the source code, they want to download a prepared binary in an installer or zipfile?

    3. Re:what's wrong with the command line by EvanED · · Score: 2

      Distributing software to end users isn't a core purpose of Google Code; the download functionality (which could be, and often was, used for that purpose) wasn't, as I understand it, provided for that purpose, but provided mostly as an alternative to using source control tools to get source code bundles.

      It's possible that's what they were thinking (and maybe even said) but it sure doesn't come out from the design of the site, which I've always thought has been well-geared toward the end users. There's a consistent landing page with consistent links to the downloads, documentation, and news groups. Of the "hey, stick your OSS projects here!" sites, Google Code has been the one that I most like to use as an end user.

  8. We've heard of BitTorrent, haven't we? by SuperBanana · · Score: 4, Interesting

    My MOM knows what BitTorrent is. It's available on nearly every platform in existence; there's even a javascript client, I think? Some browsers now have clients built-in or available via extensions. With DHT supported by most every client, you don't even need a tracker. Web seeding means you don't have to guarantee seeded peers if you've got some HTTP mirror available somewhere.

    So, can FOSS projects please grow up and start using bittorrent more? Can we make torrents a little more transparent to users, as well? As in, you click a link and you don't need to do anything else, no external programs, etc? Some big projects like Libreoffice have been using BitTorrent for a while; distributions have been as well even longer.

    PS:For the love of god, please pick a sensible chunk size *glares at people who create 300MB torrents with 4MB chunk sizes*

    1. Re:We've heard of BitTorrent, haven't we? by iggymanz · · Score: 3, Insightful

      yes, that's the thing that AT&T and comcast will threaten then cut your access if you use. good thinking

    2. Re:We've heard of BitTorrent, haven't we? by godrik · · Score: 3, Funny

      Actually the opposite might work too. If bittorrent becomes a favorite distribution protocol for FOSS, that might push ISPs into being more tolerant toward it.

  9. Re:Yet Again :( by tnk1 · · Score: 3, Insightful

    Didn't we all see this coming though? Google used to make it more obvious by slapping "Beta" on everything, but while we aren't paying for it we all know it's the same thing. You get what you pay for.

    They try out products that they hope will eventually make them money. You adopt those products because "free" and "kind of cool". Then Google realizes that lots of things are cool, but only some things make money. Product is over, adopter cries.

    I like Google products for many things, but I've never felt that I could adopt them for more than personal use because I tend to view products I buy as a long term decision based as much on their long term support prospects as their costs and functionality. That doesn't mean I'm just going to buy Microsoft, but Google has never even pretended that they are in any of this for the long haul, they just put it there and you use it until it isn't there. And when it isn't, they don't apologize because you should have known better.

    I think they have a model of throwing things at a wall and seeing what sticks. Perhaps it would be better if they had a mass of product people who were as smart as their developers are and could figure out how to make these things profitable, but I don't think they do. Indeed, I think a good product person is just as rare a quantity as a good developer is, if not more so.

  10. Way to go, Dropbox users by Anonymous Coward · · Score: 3, Insightful

    Remember when it was normal to move files around with standard protocols, which worked reliably and didn't require any bizarre shit? And then remember when someone came up with a great idea of offering file storage service, with the caveat that you would have to use weird special software in order to upload and download your files, so that we could move toward a situation where it's not always necessarily available (e.g., if the weird software hasn't been ported to your box yet) not as easily scriptable, and just didn't work as well?

    People, when that happened, you were supposed to laugh in Dropbox's face, slapping your knee while between chuckles you weakly uttered "oh my god, what a stupid idea! And how insulting for you to think we're stupid enough to fall for it!"

    That's what you were supposed to say. Instead, it seems that a bunch of people said, "oh, cooool!!!" instead.

    So of course Google had to go make Google Drive, to catch up on being as horrible as Dropbox, so that Dropbox wouldn't get the whole market of stupid people. Stupid people are a valuable market.

    But once they had to deal with stupid people and not-stupid people, they had a problem: wouldn't it be more profitable, if we could get non-stupid people to do things The Stupid Way? You know, run our "drive" software instead of rsync, sftp, etc?

    So here we are. Thanks, everyone. Thanks for making these fucking weird nonstandard clients the new norm that everyone is expected to put up with. I just realized something: you all didn't really hate AOL, did you? It stopped being "cool" (?!) but you never understood why it wasn't cool, huh?

    1. Re:Way to go, Dropbox users by Anonymous Coward · · Score: 2, Insightful

      Dropbox has a REST API you can use to upload, via standard HTTP, and a website you can use to do the same thing if you're so much of a tard that you can't write a little bit of code.

  11. Did Google ever fix Drive's date problem? by hazem · · Score: 2

    The last times I tried using Google Drive, if you downloaded more than one file, it would make a zip file with the files where the dates were all reset to Jan-1-1980. Does it still do that?

    That's a deal-killer to me and makes the service unusable. DropBox doesn't do that - so I know it's not technically impossible to so something so difficult as preserve a file's modify-time.

  12. Sourceforge by gerddie · · Score: 2

    well, thank the FSM that I never moved away from sourceforge. I migrated from CVS to SVN, now I moved to GIT, and their new Allura interface is quite nice. The only thing that I'm missing in the bug tracker is a way to properly define dependencies between bugs.

  13. Meanwhile, SourceForge reaches out to developers by MAXOMENOS · · Score: 5, Informative

    Quoting the comments:

    Roberto Galoppini May 23, 2013 at 12:40 PM

    SourceForge welcomes Google Code open source developers, to distribute downloads from our open source platform.

    We serve over 150 Million+ downloads each month, reaching 42 Million+ unique visitors. We help tiny projects as well as whales like Apache OpenOffice to distribute their downloads via our worldwide mirror network.

    By distributing your releases at SourceForge you’ll get a complete download analytics, and the opportunity to tap into a large open source community. We already serve other ecosystems by offering their hosted projects our download facilities, including Githubbers.

    As a trusted partner for open source we're glad to help. https://sourceforge.net/publish/?source=googlecode

    [Disclosure: I work for SourceForge]

    Setup looks pretty simple; but, since I don't have code in Google Code, I can't put it to the test. Can anyone attest to how well this works?

  14. Google giveth. by El_Muerte_TDS · · Score: 2

    Google taketh away.

  15. Funny, I was just wondering when this will happen! by NeoHermit · · Score: 2

    A few hours ago, I was just thinking this might happen someday, and wondering if I should use sourceforge for the downloads of my next software releases in the coming days. Never thought that someday might be today!

  16. Re:Addendum by Dishevel · · Score: 2, Insightful

    Forgive them. Products of a school system that has taught them that everything they do is worthy. The world owes them.
    A trophy to every participant. Wining and losing are the same. As long as you show up ...
    Google owes them everything forever. Anything less in their world view really is evil.
    They feel they are being ROBBED.
    You can not invalidate their feelings. That will make you insensitive and evil.

    --
    Why is it so hard to only have politicians for a few years, then have them go away?
  17. Re:Addendum by pushing-robot · · Score: 2

    Well, I usually use "genocide".

    --
    How can I believe you when you tell me what I don't want to hear?
  18. Re: Doesn't Github already do this? by dehole · · Score: 2

    An additional benifit is that if you disappear, your projects will live on. If you host your files and code on your own server, when you decided to close it down, it goes with it.

    I've seen far too many dead links that I would have loved to see...

  19. The also changed the Lic Terms to D&R by goombah99 · · Score: 3, Funny

    here's there new Lic terms for all google code:

    D&R (Death and Repudiation) License
    ========

    This software may not be used directly by any living being. ANY use of this
    software (even perfectly legitimate and non-commercial uses) until after death
    is explicitly restricted. Any living being using (or attempting to use) this software
    will be punished to the fullest extent of the law.

    For your protection, corpses will not be punished. We respectfully request
    that you submit your uses (revisions, uses, distributions, uses, etc.) to
    your children, who may vicariously perform these uses on your behalf. If
    you use this software and you are found to be not dead, you will be punished
    to the fullest extent of the law.

    If you are found to be a ghost or angel, you will be punished to the fullest
    extent of the law.

    After your following the terms of this license, the author has vowed to repudiate
    your claim, meaning that the validity of this contract will no longer be recognized.
    This license will be unexpectedly revoked (at a time which is designated to be
    most inconvenient) and involved heirs will be punished to the fullest extent
    of the law.

    Furthermore, if any parties (related or non-related) escape the punishments
    outlined herein, they will be severely punished to the fullest extent of a new
    revised law that (1) expands the statement "fullest extent of the law" to encompass
    an infinite duration of infinite punishments and (2) exacts said punishments
    upon all parties (related or non-related).

    --
    Some drink at the fountain of knowledge. Others just gargle.
  20. Old school by peppepz · · Score: 2

    Google Drive is recommended as an alternative

    Or, you know, FTP.