On Wed, Sep 27, 2006 at 05:00:26PM +1000, david wrote:
> On Wed, 2006-09-27 at 14:54 +1000, Howard Lowndes wrote:
> > Gavin Carr wrote:
> > > On Wed, Sep 27, 2006 at 12:28:16PM +1000, Jacinta Richardson wrote:
> > >> Rev Simon Rumble wrote:
> > >>> That sounds doable.  What accounting package, if you don't mind?
> > >> We use gnucash, but SQL Ledger ( http://www.sql-ledger.org/ ) has been 
> > >> getting
> > >> press.  We were toying with the idea of moving over, but we haven't yet.
> > > 
> > > I'm a SQL Ledger user too, but there's been an interesting fork in the
> > > project in the last month to six weeks, due to the perceived lack of
> > > openness and responsiveness of SQL Ledger's author. So you might want 
> > > to check out http://www.ledgersmb.org/ as well if you're considering
> > > moving.
> > 
> > This is both an interesting and concerning twist that I was not aware 
> > of.  Do you have any further info other than the link?
> 
> There was a lot of gnashing of teeth about a perceived security hole in
> SQL-Ledger. Two guys posted notice of the hole but the author did not
> appear to do anything about it, so a couple of weeks ago they decided to
> write their own fix and fork.
> 
> The author of SQL-Ledger basically writes the entire package on his own
> under GPL and sells support and documentation to make money.
> 
> He is very active developing SQL-Ledger, but I have to say that he has
> very poor human communication skills. It will be very interesting to see
> if the fork has legs. So far I'm sticking to the SQL-Ledger version, but
> there is some very interesting chatter on the ledgersmb mailing list, so
> it will be a space worth watching. 
> 
> I guess it's a classic GPL fork situation. 

I agree with David - SQL-Ledger is a pretty impressive product for a 
one-man show, but Dieter's not been very good at managing the communication
and community sides of things, and he was supposedly alerted to this 
security issue months ago and didn't do anything until the fork happened.

The fork is likely to be a more community-oriented approach, and has 
members members of the PostgreSQL team involved, but it remains to be seen
what kind of longevity it has.

Cheers,
Gavin

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to