[Catalog-sig] bad package that's fishing bitbucket emails

Robert Kern robert.kern at gmail.com
Thu Mar 29 13:19:32 CEST 2012

On 3/29/12 11:56 AM, M.-A. Lemburg wrote:
> M.-A. Lemburg wrote:
>> Michael Foord wrote:
>>> Hello mt,
>>> It doesn't appear to be a clone, but embedding bitbucket - and the Python package *seems* genuine.
>> The site hosts an illegal copy of the bitbucket site and redirects the logins
>> not to bitbucket, but to the code.thejeshgn.com:
>> http://code.thejeshgn.com/account/signin/
>> Needless to mention that the login info is sent in clear as well...
>> I think we should inform Atlassian about this.
> Looks like he cloned bitbucket for all his bitbucket repos:
> http://code.thejeshgn.com/
> and happily proxies requests through his site.

Are we sure this is not just an instance of this supported feature of Bitbucket?


Robert Kern

"I have come to believe that the whole world is an enigma, a harmless enigma
  that is made terrible by our own mad attempt to interpret it as though it had
  an underlying truth."
   -- Umberto Eco

More information about the Catalog-SIG mailing list