On Thu, 21 Feb 2019 11:41:19 +0100 Richard Brown wrote:
We can't just have people randomly turning off services which provide key planks to the project. If OBS dissapeared tomorrow without replacement we wouldn't have any distributions. If connect.opensuse.org disappears tomorrow we don't have any Project members.
I completely disagree with you here. The world will not fall apart if OBS would not be there any longer. Think about other distributions who are able to release without OBS. openSUSE might be delayed and things might need some manual work, but releasing a distribution is not depending on a single tool. As such, maintaining 447 [1] openSUSE members should not depend on a single tool. Especially not if the used tool has open, well known security issues since years[2].
This isn't the first time I've asked this question on a public stage, but in the hope that this time I get an answer; Who volunteers to tackle the problem with connect.o.o and drive forward a solution?
I made my proposal already and I stand the point: shut down an insecure system! With connect.o.o still online, there is no real need to think about any alternative, as people always come up and say: "Hey, yes, we might need to discuss this somewhere in the future. But for now, let's use what we have". The discussion to shut down connect.o.o is now more than a year old (at least from what I found in public documents[3]). With the openSUSE board and especially the openSUSE Chairman telling the administrators over and over again that openSUSE will die if connect.o.o is down, I see no way out of this situation. Lars -- [1]: visible to logged in users here: https://connect.opensuse.org/pg/groups/111/opensuse-members/ [2]: ELGG version used, according to the headers: 1.7.10 https://www.cvedetails.com/vulnerability-list/vendor_id-11507/product_id-211... ^ note that this is the result of a 3 seconds google search and not a real audit. [3]: https://en.opensuse.org/openSUSE:Heroes/Meetings/20180303_Summary -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org