Is MuseHub a Trojan horse?
I downloaded Musescore 4 as an AppImage on Ubuntu and have been using it to edit scores locally. In the middle of editing a score I watched your video about Muse Sounds telling me how wonderful it is, with no provisos, so I downloaded the MuseHub .deb from musescore.org, installed it, and suddenly I could no longer save my scores without creating an account on musescore.com. Despite purging the package, stopping the service and even restarting the machine, it's still the same.
What on earth?
Comments
See: https://musescore.org/en/node/341517
In reply to See: https://musescore.org… by Shoichi
Thanks - yes I had found that thread, which is off-putting enough, but didn't seem to address this particular issue. The fact that it changed the behaviour of MuseScore mid-session made me flabbergasted, and now I can't restore the original behaviour. It's left a
~/.muse-hubhidden directory, which I've renamed to no avail, but nothing's changed in `~/.local/share/MuseScore/MuseScore4/' apart from the logs and recent files list.double post, sorry
In reply to see https://musescore.org/en… by graffesmusic
Thank you! I hadn't spotted that file or I'd have noticed it had changed - not that I'd have known what had changed!
Whether it was me or whether it was MuseHub that did that I do not know, but I'm not inclined to install MuseHub again to find out!
In reply to Thank you! I hadn't spotted… by ukuser
Ar least on any of my systems, it was not MuseHub
In reply to see https://musescore.org/en… by graffesmusic
@ukuser, also try Edit/Preferences/Save& and uncheck save to cloud
In reply to @ukuser, also try Edit… by Shoichi
Is that ms 4.1.1? I don't see that option
In reply to Is that ms 4.1.1? I don't… by graffesmusic
@graffesmusic, sorry I misspoke, I meant 'never' in Nightly (Save&Publish I think refers only to mp3s) and I don't use File/Save to Cloud (or Publish).
![23101201.png]( "23101201.png")
In reply to @graffesmusic, sorry I… by Shoichi
Yep, this 'never' is for 'generate MP3 audio for private cloud scores'.
In reply to Yep, this is 'never' is for … by graffesmusic
Yes, of course, I am distracted and should refrain from interfering :(
In reply to @ukuser, also try Edit… by Shoichi
Hm - I don't have a Save under Edit/Preferences and haven't spotted anything in other sections.
In reply to Hm - I don't have a Save… by ukuser
The github issue : https://github.com/musescore/MuseScore/issues/16037
In reply to The github issue : https:/… by graffesmusic
Thanks again. Curious that to get the behaviour I experienced you have to tick a "don't ask again" as well - I have no recollection of doing that so it makes me more confident that it was installing the Muse Hub that did that.
In reply to Thanks again. Curious that… by ukuser
On my system, i have this behavior when i just choose "save to cloud', and immediately cancel this operation. So without ever entering credentials (because i do not want to use such a 'cloud' service)
Just clicking on 'save to cloud' by mistake is enough to get you into a situation where you cannot save your work anymore - except if you login to MS cloud.
If you do login, even once, you don't have the problem anymore.
You credentials are then stored in a file
~/.local/share/MuseScore/MuseScore4/musescorecom_cred.dat
see https://musescore.org/en/node/341105
if you click once "Save to cloud", even when cancelling the actual save operation, then every time you choose "save as", the credentials for musescore.com are asked.
This is controlled in the ini file (in Linux: ~/.config/MuseScore/MuseScore4.ini )
lastUsedSaveLocationType=2
if the option is reset to
lastUsedSaveLocationType=1
then no more attempts to save to the cloud are being made anymore.
(perhaps this has changed meanwhile, i did not check)
I would install the Muse Sounds Manager (https://www.musehub.com/ at the very end of the page) instead of Musehub. Then, at least you don't have to deal with an insecure service anymore.
In reply to see https://musescore.org/en… by graffesmusic
Thanks - see reply above.
That is truly bizarre behaviour.
Muse Sounds Manager appears to be a completely mystery product as far as the website is concerned.
I notice there are no MuseHub uninstall instructions for Linux.
In reply to Thanks - see reply above… by ukuser
Just uninstall the deb file does not work?
Muse sound manager is beta, only for Linux. And was not announced here
In reply to Just uninstall the deb file… by graffesmusic
see
https://musehub.zendesk.com/hc/en-gb/community/posts/13271862648861-Lin…
In reply to Just uninstall the deb file… by graffesmusic
I
apt-get purged the package and it neither stopped the service nor removed the~/.muse-hubdirectory.In reply to I apt-get purged the package… by ukuser
IMHO, you really should remove the service - manually if needed, since completely insecure - running as root
In reply to IMHO, you really should… by graffesmusic
Yes, I stopped the service - purging removes its configuration, so once stopped it can't be started again, but a properly-constructed package should contain an uninstall script which does this.