# Re: [snapscan] Sourceforge request submitted

From: Peck Dickens (peck_d@bellsouth.net)
Date: Sat Oct 14 2000 - 16:33:04 PDT

- Next message: Petter Reinholdtsen: "Re: remove option -pedantic from standard gcc options?"
  - Previous message: David Mosberger-Tang: "Re: [snapscan] Sourceforge request submitted"
  - In reply to: David Mosberger-Tang: "Re: [snapscan] Sourceforge request submitted"
  - Next in thread: Petter Reinholdtsen: "Re: [snapscan] Sourceforge request submitted"
  - Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

  On Sat, 14 Oct 2000, you wrote:
  > >>>>> On Fri, 13 Oct 2000 16:28:00 +0800, Petter Reinholdtsen <pere@hungry.com> said:
  >
  > Petter> Parhaps we should do the same for the SANE project itself?
  > Petter> It would give us a working bug tracking and a patch manager
  > Petter> system. I do not think we want to use some of the other
  > Petter> features. (Parhaps the CVS repository, but the Hungry
  > Petter> Programmers one works just fine. :-)
  >
  > In my opinion, it's a mistake to collect all open source projects in a
  > single place. A uniform directory a la Freshmeat is a great idea, but
  > sourceforge worries me because it represents a single point of
  > failure. "Failure" here could mean anything from denial of service
  > attacks, polluting source code with nasty viruses, bankruptcy of the
  > sponsor, or hostile takeover of the sponsor by another company. Yeah,
  > all of this is possible with pretty much any other site as well, but
  > the more projects are hosted in a single place, the more worthwhile a
  > target it becomes.
  >
  > Diversity is good and perhaps best way to make a complex ecological
  > system robust.
  >
  > --david

  This is interesting... I *never* considered an attack of sourceforge as
  something a cracker might consider. Facts be known, open source
  projects are scattered all over the web... Tens of thousands of places besides
  sourceforge. However, sourceforge is probably the most high profile of all
  the repositories. Considering all real open source developers keep a copy of
  their work such an attack would slow the process (And piss people off...), but I
  seriously doubt anything major would be lost. Plus, I bet sourceforge archives
  at least twice daily. Also, I would not want to be the person that crashed sourceforge...
  You would have some of the brightest minds on the web after you... Prison would be
  an inevitiable reality. Your next roommate would be some nasty dude named
  "Bubba" who is looking for some affection... And he finds you attactive.

  However, What does sourceforge offer us at this point anyway...?... I see no
  advantage.

      --
      Best
      Peck
      --
      Source code, list archive, and docs: http://www.mostang.com/sane/
      To unsubscribe: echo unsubscribe sane-devel | mail majordomo@mostang.com

  - Next message: Petter Reinholdtsen: "Re: remove option -pedantic from standard gcc options?"
  - Previous message: David Mosberger-Tang: "Re: [snapscan] Sourceforge request submitted"
  - In reply to: David Mosberger-Tang: "Re: [snapscan] Sourceforge request submitted"
  - Next in thread: Petter Reinholdtsen: "Re: [snapscan] Sourceforge request submitted"
  - Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

  This archive was generated by hypermail 2b29 : Sat Oct 14 2000 - 16:40:49 PDT