Re: [SL] SQL-Ledger vulnerability CVE-2006-4244

[Josh B. <jo...@ag...>]

David,

> More importantly though: It also appears that the fork was caused by a
> perception that requests for fixes/patches/enhancements were going
> nowhere, and even sensible discussion on an issue was simply not
> happening. 

True, as far as I'm concerned.  I don't exactly have a lot of spare time to 
work on non-core projects.   But, Dieter recommended the current course of 
action: if we don't like the way SQL-Ledger is run, go to another project.  
So I'm just following his advice.

> This is certainly not the first time I have seen this happen 
> here, and I guess one day, inevitably it will lead to a successful open
> source accounting system project springing up somewhere. Whether
> LedgerSMB will be that project is to be seen.

Well, this is partly up to you.   We're doing all we can to ensure that 
LedgerSMB will not have the same issues.  But success in OSS is really 
dependant on people joining.

Frankly, my fantasy is that LedgerSMB is so successful that Dieter realizes 
that he could do more, and make more money, with a popular OSS project 
than with a tiny non-public niche project supported only by him, and that 
the two projects re-merge as the #1 OSS accounting application they were 
meant to be.

-- 
--Josh

Josh Berkus
PostgreSQL @ Sun
San Francisco