This site ahead may contain harmful programs

[net-raider]

Comment:

What????

[rbavery]

I also got an error from google chrome when downloading the miniforge installer: dangerous download blocked.

[jakirkham]

Thanks for letting us know! 🙏

Could you please share the steps to reproduce?

FWIW just tried googling Miniforge, clicking different links, and performing downloads of Miniforge on Safari, Chrome, and Firefox without seeing the issue. Am having a hard time getting the error so need some more pointers on how

[net-raider]

to me, it happens when I get to the specific link in the screenshot

[rbavery]

for me it was downloading the arm installer from this table https://github.com/conda-forge/miniforge?tab=readme-ov-file#miniforge3

I was on really slow hotel wifi that is open access, no auth. that might have had something to do with it?

[jakirkham]

Interesting thanks! 🙏

Am able to reproduce in Google Chrome when going here: https://github.com/conda-forge/miniforge?tab=readme-ov-file

Note that dropping the parameter does not cause the issue: https://github.com/conda-forge/miniforge

Searching for more info about why Chrome is flagging this URL leads to this Google Support answer with recommended next steps

cc @conda-forge/core

[antonkoenig]

The warning is still active and can be reproduced.

[jaimergp]

Do the links at https://conda-forge.org/download/ raise any warnings?

[net-raider]

Do the links at https://conda-forge.org/download/ raise any warnings?

I tried all six links and the downloads went through

[malbergo]

I'm still having this issue. How Can I verify that the download is safe (miniforge for apple silicone)?

[HenrikBengtsson]

Here's a tad more info from the Google Safe Browsing site (e.g. when the last scan was made):

• https://transparencyreport.google.com/safe-browsing/search?url=https:%2F%2Fgithub.com%2Fconda-forge%2Fminiforge%3Ftab%3Dreadme-ov-file
• https://transparencyreport.google.com/safe-browsing/search?url=https:%2F%2Fgithub.com%2Fconda-forge%2Fminiforge

[jaimergp]

I checked guidelines and everything but we can't pin point at what exactly is triggering the warning. There are a bunch of links to shell scripts (installers), so maybe the don't like this. We could ask for a review through their Search Console (or whatever the name is), but that requires ownership of the "website". Since this a Github repo, we can't do that. The only alternative I can think of is putting the README contents in https://conda-forge.org/download (or a more specific page like /miniforge), and then link to that page from the README. If that ever triggers a warning, then we do have the power to signup for the Search Console with conda-forge.org and ask for more detailed reviews.

WDYT @conda-forge/core?

[beckermr]

Go for it!

[jaimergp]

I brought this up in the core meeting and yes, looks like we have no other choice.