Forum OpenACS Q&A: Re: aolServer security issues

Collapse
Posted by Don Baccus on
I'll second what Andrew says about the "bad old days" when the AOLserver team was reluctant to accept patches or improvements from the user community.

Why was the AOLserver team reluctant?  In large part because off security concerns!  They were very busy, unfamiliar with the software engineers in the user community, didn't really have time to vet patches and were being paid to make AOLserver as solid as possible for AOL's use.

Which led, among other things, to Windows support being removed (because AOL is strictly a Unix shop.)

Things have changed greatly as the AOL team and the more skilled programmers within the user community have become acquainted with each other's work.

Windows support's been put back in.  The localization issues and cache module from ad13 are now included in AOLserver 4.0.  Various modules from the user community are available for download from the AOLserver sourceforge site.  Etc.

So the AOLserver team does work now in the "many eyes make short work" style so characteristic of successful Open Source projects.