4 ms·

While it is true that OpenOffice didn't get major updates for nearly a decade, it does what it's supposed to do, and is pretty stable. I still use it as it's fa

While it is true that OpenOffice didn't get major updates for nearly a decade, it does what it's supposed to do, and is pretty stable. I still use it as it's faster than LibreOffice and I'm used to it. And why spam Apache to deprecate OO? It's not like OO is doing any harm for Apache or its users, one can install LibreOffice instead if they want it.

yjftsjthsd-h 3y ago
> It's not like OO is doing any harm for Apache or its users The problem is that it is doing harm to its users, in the form of unaddressed security vulnerabilities.
- davefisher-oo 3y ago
  Most of the 14 minor releases since 2014 have addressed security including 4.1.14 this past February. See https://www.openoffice.org/security/bulletin.html https://www.openoffice.org/security/bulletin.html For instructions on how you can report an actual security issue: https://openoffice.apache.org/security https://openoffice.apache.org/security We do wish to know about security problems. We are an all volunteer project. AFAIK No one is paid anything to work on Apache OpenOffice
  - yjftsjthsd-h 3y ago
    The allegation upthread (https://news.ycombinator.com/item?id=37646366 https://news.ycombinator.com/item?id=37646366) was that security fixes are so slow to come out that it is more or less irrelevant that they eventually get released. While OO release notes do list security issues that are fixed in that release, I can't seem to find info about when each was found/reported so it's hard for me to tell whether that particular example was unusually long or not; if you have evidence that the process has improved that would be useful to know. > We do wish to know about security problems. We are an all volunteer project. AFAIK No one is paid anything to work on Apache OpenOffice That makes it understandable that people can't commit to working on it, but isn't exactly a counterargument to "the project doesn't patch quickly". Like, it's not a personal attack, it's a breakdown of risk factors, in which case nobody getting paid to care is another argument that the product won't fix vulnerabilities quickly.

yjftsjthsd-h 3y ago

> It's not like OO is doing any harm for Apache or its users The problem is that it is doing harm to its users, in the form of unaddressed security vulnerabilities.

davefisher-oo 3y ago
Most of the 14 minor releases since 2014 have addressed security including 4.1.14 this past February. See https://www.openoffice.org/security/bulletin.html https://www.openoffice.org/security/bulletin.html For instructions on how you can report an actual security issue: https://openoffice.apache.org/security https://openoffice.apache.org/security We do wish to know about security problems. We are an all volunteer project. AFAIK No one is paid anything to work on Apache OpenOffice
- yjftsjthsd-h 3y ago
  The allegation upthread (https://news.ycombinator.com/item?id=37646366 https://news.ycombinator.com/item?id=37646366) was that security fixes are so slow to come out that it is more or less irrelevant that they eventually get released. While OO release notes do list security issues that are fixed in that release, I can't seem to find info about when each was found/reported so it's hard for me to tell whether that particular example was unusually long or not; if you have evidence that the process has improved that would be useful to know. > We do wish to know about security problems. We are an all volunteer project. AFAIK No one is paid anything to work on Apache OpenOffice That makes it understandable that people can't commit to working on it, but isn't exactly a counterargument to "the project doesn't patch quickly". Like, it's not a personal attack, it's a breakdown of risk factors, in which case nobody getting paid to care is another argument that the product won't fix vulnerabilities quickly.