MuseHub compromised/used as backdoor vector about musescore HOT 5 CLOSED

This title seems clickbait, because there is quite a big difference between accepting incoming connections and being "compromised/used as a backdoor vector".

Anyway, as said, this doesn't belong here but on https://musehub.zendesk.com/. If Muse Hub engineers don't respond there, they will even less likely respond here.

from musescore.

Muse Hub uses p2p traffic to download it's sound updates..

from musescore.

a) Disable the Community Acceleration in MuseHub's options, then at least foreign IPs won't contact you. And yers, this should really be disabled by default, and/or being asked for on initial install. IMHO this being set to on by default and without the users' explicit consent is a rather severe breach of privacy
b) I believe you'd need to bring that up with the MuseHub team at https://musehub.zendesk.com/
c) This isn't new at all and had been brought numerous times, so far to no avial though :-(

from musescore.

Clickbait? To what end, so that I can make money through my popular Github posts? I will concede that I'm certainly no cybersecurity expert, but the idea that I opened this to "get attention" is asinine.

I get that Malwarebytes might throw some false positives, but getting connections from the US, Belize, etc... is not "just" incoming connections.

What @Jojo-Schmitz said is precisely the point (and thank you for pointing out the option to disable). So, agreed, it's not necessarily compromised, I suppose I ought to have said "potential" compromise, but it definitely shouldn't be allowing traffic to anyone else who has MuseHub without my consent.

Anyway, I was not aware of the other site where I could report a MuseHub-specific issue, so I will check that out.

from musescore.

Sorry for being too mistrusting towards you. Unfortunately it happens often that people use untrue overly dramatic statements to draw attention towards themselves or to harm the reputation of others.

I'm happy to hear that things have now been clarified, both w.r.t. what this traffic is and about the Muse Hub website. (Perhaps, after explaining this again and again to other users, I had assumed too quickly that this would be known to you too….)

from musescore.