ImageGlass

https://github.com/MonoGame/MonoGame (runs even on consoles, which is rare for open source game frameworks and engines) https://github.com/SubtitleEdit/subtitleedit https://github.com/jellyfin/jellyfin https://github.com/AvaloniaUI/Avalonia https://github.com/bitwarden/server https://github.com/unoplatform/uno https://github.com/files-community/Files https://github.com/NickeManarin/ScreenToGif https://github.com/DevToys-app/DevToys https://github.com/d2phap/ImageGlass https://github.com/ShareX/ShareX https://github.com/duplicati/duplicati https://github.com/OpenRA/OpenRA https://en.wikipedia.org/wiki/Ryujinx https://sourceforge.net/projects/keepass/ https://github.com/orchardcms https://github.com/piranhacms/piranha.core https://github.com/umbraco/Umbraco-CMS

They make use of residential IP:s without their consent/knowledge. See https://github.com/d2phap/ImageGlass/issues/1252 for an example on how this might happen (spider.com).

Didn't read the whole code but this makes me think it was: https://github.com/d2phap/ImageGlass/commit/31c1b918165c42de...

DISCLAIMER: I am not the developer, nor am in any way involved with ImageGlass. Wow, this thread is like 35 minutes old and people are already jumping to conclusions, bashing the developer, bringing out the torches to burn them at stake. Really disappointed seeing this on HN... Perhaps the title itself is insinuating, and people are not patient enough to dig any deeper. Perhaps someone can add [quickly reverted] or something to the title? That being said, I really wonder why people 100% believe other people act in bad faith. Looking into that Github issue (https://github.com/d2phap/ImageGlass/issues/1252 ), it feels more like the dev was not aware of the issues with the bad actor in question, and was also very quick to revert the issue and pull the affected release from Github. This is the best someone can do under this situation, and I'm

Already reverted. >Very positively surprised by you listening to feedback and changing it, I was about to drop ImageGlass. I'm sure you'll figure out a better way to financially support the project. >One thing you should definitely do is promote the Microsoft Store version more directly, I previously didn't know you could even buy ImageGlass. Now I'll do just that. It's hard to notice on the website, and you could also display something when launching the program the first time. - https://github.com/d2phap/ImageGlass/issues/1252#issuecommen... Financial support for a project is hard. Novel approach I've not seen before, not something I'd want.

Some discussion happened here (issue closed by owner): https://github.com/d2phap/ImageGlass/issues/1252 The malware (at the very least) makes the user's machine the exit node of a commercial proxy service, without users' knowledge or consent. In the repo maintainer's own words (in a "privacy" menu setting that was enabled by default): >"Share devide IP with Spider.com customers to pass traffic through your device." >"Learn more about privacy policy at {0}. To opt out an option, you can uncheck it, then click 'Save' or 'Apply' button below. It will be disabled immediately." https://github.com/d2phap/ImageGlass/blob/51f9f5eaa17f6fc42e...

Yikes: https://github.com/d2phap/ImageGlass/commit/97c716cf1ad23535... "BIN +10.3 MB Source/Libs/Spider-sdk/x86_64/bs-sdk.dll" Commit message: "restructure external dlls" [sic] edit: And to dispel any doubt that the dev comprehended exactly what he was inserting: >"Share devide IP with Spider.com customers to pass traffic through your device." https://github.com/d2phap/ImageGlass/blob/51f9f5eaa17f6fc42e...

https://github.com/d2phap/ImageGlass https://i.imgur.com/Q8LzV27.png http://www.imageglass.org/download/themes http://www.imageglass.org/download/extensions http://www.imageglass.org/download/languagepacks I'm not affiliated with the project.