Re: [security-discuss] gnuradio project DoS attacks GNU wget users

[Assaf Gordon]

Hello Anonymous and all,

On Thu, Mar 09, 2017 at 05:31:01AM -0500, Alfred M. Szmidt wrote:
>   On the other hand, the website http://gnuradio.org/ is not providing a
>   reference to documentation.
>
> Please send suggestions to improving GNU radio to the GNU radio
> maintainers.  The GNU radio maintainers are most probobly not
> subscribed to this list.

If I may make a concrete suggestion:

GNU-radio maintainers have accounts on gnu savannah [1],
and in the past have uploaded releases to gnu's ftp server [2].

[1] https://savannah.gnu.org/project/memberlist.php?group=gnuradio
[2] https://ftp.gnu.org/gnu/gnuradio/

You can write to them and ask if they might be willing to resume this
method and upload snapshots to gnu's ftp server, which will avoid most
tor/cloudfire issues.

As a fallback, they can also store files on savannah's 'download'
server [3] which requires only scp/rsync access (slightly easier than
uploading to gnu's ftp). This is discouraged for GNU projects,
but I guess it's better than nothing.

[3] https://download.savannah.gnu.org/releases/


regards,
- assaf