You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@openoffice.apache.org by Rob Weir <ro...@apache.org> on 2012/08/23 16:22:56 UTC
[ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
The Apache OpenOffice project is pleased to announce the immediate
availability of Apache OpenOffice 3.4.1, the latest release of the
free and open community-developed productivity suite. This
maintenance release builds upon the success of Apache OpenOffice
3.4.0, which has been downloaded over 12 million times by users in 228
countries, and adds further language support, platform compatibility,
performance enhancements and bug fixes. OpenOffice 3.4.1 can be
downloaded now from http://www.openoffice.org/download/ or by going to
the the Help/Check for Updates dialog within OpenOffice 3.4 or 3.3.
Further details can be found in our announcement blog post:
http://blogs.apache.org/OOo/entry/announcing_apache_openoffice_3_41
Regards,
-Rob
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
Re: Quickstarter: was Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Dave Fisher <da...@comcast.net>.
On Aug 24, 2012, at 9:24 AM, Mike Scott wrote:
> On 24/08/12 16:26, Heh wrote:
>> On Fri, 24 Aug 2012 10:36:59 -0400
>> Scooter C <sc...@scootersdesk.com> wrote:
>>
> [snip OT irrelevancies]
>>
>
> None of which (including Scooter's changed-subject reply) addresses any
> AOO issue in any manner whatsoever. Perhaps personal comments are best
> kept off-list?
>
> So, as I asked up-thread:
>
> "This issue [ie quickstarter running during upgrades] keeps popping up.
> Daft question - why cannot the installer simply kill the quickstarter
> process?"
That's a good point. A bug has been filed in the past: https://issues.apache.org/ooo/show_bug.cgi?id=119166
Regards,
Dave
>
>
> --
> Mike Scott
> Harlow, Essex, England
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
> For additional commands, e-mail: ooo-users-help@incubator.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
Re: Quickstarter: was Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1
(incubating) released
Posted by Mike Scott <mi...@scottsonline.org.uk>.
On 24/08/12 16:26, Heh wrote:
> On Fri, 24 Aug 2012 10:36:59 -0400
> Scooter C <sc...@scootersdesk.com> wrote:
>
[snip OT irrelevancies]
>
None of which (including Scooter's changed-subject reply) addresses any
AOO issue in any manner whatsoever. Perhaps personal comments are best
kept off-list?
So, as I asked up-thread:
"This issue [ie quickstarter running during upgrades] keeps popping up.
Daft question - why cannot the installer simply kill the quickstarter
process?"
--
Mike Scott
Harlow, Essex, England
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
HEH insomniactoo@localnet.com
Posted by Scooter C <sc...@scootersdesk.com>.
Mr, or Ms. HEH insomniactoo@localnet.com,
You don't know me, thankfully I don't know you and wouldn't care to.
You remind me of the Empire State building fellow.
Scooter
Heh wrote on 8/24/2012 11:26 AM:
You're depressing as hell. If this is so gawd-awful for you, why do
you keep a it? Surely in all your 'searching' you've found something
that will work for you and do what you want and that doesn't send you
into such suicidal-sounding funks! If anyone or anything is "brain
damaged" it's you! Seek professional help, an expensive psychiatrist is
the first suggestion.
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
Re: Quickstarter: was Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1
(incubating) released
Posted by Heh <in...@localnet.com>.
On Fri, 24 Aug 2012 10:36:59 -0400
Scooter C <sc...@scootersdesk.com> wrote:
> Good Morning Group,
>
> It would seem that most of what was good about OOo was thrown out when
> Apache Software Foundation (ASF) took over its reissue as an
> "incubating" project.
>
> I went through this Quickststarter bit when I erroneously installed the
> RC version and so I had no problem with the actual 3.4.1 Update.
> However, I had to download the update because the update inside the
> program didn't work. Hopefully this has has been corrected in the real
> Update.
>
> Hope, is all I have for AOO, because it looks like its going to be a
> long journey to a smooth operating program, like I did with the original
> OOo, but then it was new (a child) and bumps were expected.
> So far, in my opinion, AOO is "brain damaged" on its way to adulthood, again.
> I don't know ASF so my faith is tenuous. Volunteer organizations are
> greatly appreciated, but are also well known for lengthy learning curves
> and long times in making community decisions.
>
> I've read all I could find at the website, on ASF's procedures, but
> garnered little actual "to the point" information about how a program
> gets from incubation (kindergarden) to highschool. There is no
> step-by-step chart of this procedure, unless I was looking in the wrong
> places. Teachers often forget that students don't have the basic tools
> to learn a new technique or lesson. I'm a new student of ASF.
>
You're depressing as hell. If this is so gawd-awful for you, why do you keep
a it? Surely in all your 'searching' you've found something that will work
for you and do what you want and that doesn't send you into such
suicidal-sounding funks! If anyone or anything is "brain damaged" it's you!
Seek professional help, an expensive psychiatrist is the first suggestion.
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
Re: Quickstarter: was Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1
(incubating) released
Posted by Scooter C <sc...@scootersdesk.com>.
Good Morning Group,
It would seem that most of what was good about OOo was thrown out when
Apache Software Foundation (ASF) took over its reissue as an
"incubating" project.
I went through this Quickststarter bit when I erroneously installed the
RC version and so I had no problem with the actual 3.4.1 Update.
However, I had to download the update because the update inside the
program didn't work. Hopefully this has has been corrected in the real
Update.
Hope, is all I have for AOO, because it looks like its going to be a
long journey to a smooth operating program, like I did with the original
OOo, but then it was new (a child) and bumps were expected.
So far, in my opinion, AOO is "brain damaged" on its way to adulthood,
again.
I don't know ASF so my faith is tenuous. Volunteer organizations are
greatly appreciated, but are also well known for lengthy learning curves
and long times in making community decisions.
I've read all I could find at the website, on ASF's procedures, but
garnered little actual "to the point" information about how a program
gets from incubation (kindergarden) to highschool. There is no
step-by-step chart of this procedure, unless I was looking in the wrong
places. Teachers often forget that students don't have the basic tools
to learn a new technique or lesson. I'm a new student of ASF.
Take Care.
Scooter
College Park, MD USA
Mike Scott wrote on 8/24/2012 3:26 AM:
> On 24/08/2012 05:06, Larry Gusaas wrote:
>> On 2012-08-23 7:25 PM Kyabsuchi wrote concerning "Re: [ANNOUNCEMENT]
>> Apache OpenOffice 3.4.1 (incubating) released":
>>> I have tried several times to install OpenOffice on System 7. each
>>> time I get a message to close the QuickStarter, and the installer
>>> terminates, notifying me that the installation is incomplete and the
>>> program has not been modified.
>> Quit QuickStarter and then install Apache OpenOffice.
>>
>> To quit QuickStarter go to the system tray (or task manager) and quit
>> QuickStarter.
>>
> This issue keeps popping up. Daft question - why cannot the installer
> simply kill the quickstarter process?
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
Re: Quickstarter: was Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1
(incubating) released
Posted by Mike Scott <mi...@scottsonline.org.uk>.
On 24/08/2012 05:06, Larry Gusaas wrote:
>
> On 2012-08-23 7:25 PM Kyabsuchi wrote concerning "Re: [ANNOUNCEMENT]
> Apache OpenOffice 3.4.1 (incubating) released":
>> I have tried several times to install OpenOffice on System 7. each
>> time I get a message to close the QuickStarter, and the installer
>> terminates, notifying me that the installation is incomplete and the
>> program has not been modified.
>
> Quit QuickStarter and then install Apache OpenOffice.
>
> To quit QuickStarter go to the system tray (or task manager) and quit
> QuickStarter.
>
This issue keeps popping up. Daft question - why cannot the installer
simply kill the quickstarter process?
--
Mike Scott
Harlow, Essex, England
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
Quickstarter: was Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating)
released
Posted by Larry Gusaas <la...@gmail.com>.
On 2012-08-23 7:25 PM Kyabsuchi wrote concerning "Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1
(incubating) released":
> I have tried several times to install OpenOffice on System 7. each time I get a message to close the QuickStarter, and the installer terminates, notifying me that the installation is incomplete and the program has not been modified.
Quit QuickStarter and then install Apache OpenOffice.
To quit QuickStarter go to the system tray (or task manager) and quit QuickStarter.
--
_________________________________
Larry I. Gusaas
Moose Jaw, Saskatchewan Canada
Website: http://larry-gusaas.com
"An artist is never ahead of his time but most people are far behind theirs." - Edgard Varese
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Kyabsuchi <ky...@gmail.com>.
I have tried several times to install OpenOffice on System 7. each time I get a message to close the QuickStarter, and the installer terminates, notifying me that the installation is incomplete and the program has not been modified.
Jim Easton
858-527-0240
On Aug 23, 2012, at 7:22, Rob Weir <ro...@apache.org> wrote:
> The Apache OpenOffice project is pleased to announce the immediate
> availability of Apache OpenOffice 3.4.1, the latest release of the
> free and open community-developed productivity suite. This
> maintenance release builds upon the success of Apache OpenOffice
> 3.4.0, which has been downloaded over 12 million times by users in 228
> countries, and adds further language support, platform compatibility,
> performance enhancements and bug fixes. OpenOffice 3.4.1 can be
> downloaded now from http://www.openoffice.org/download/ or by going to
> the the Help/Check for Updates dialog within OpenOffice 3.4 or 3.3.
>
> Further details can be found in our announcement blog post:
>
> http://blogs.apache.org/OOo/entry/announcing_apache_openoffice_3_41
>
> Regards,
>
> -Rob
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
> For additional commands, e-mail: ooo-users-help@incubator.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by imacat <im...@mail.imacat.idv.tw>.
Congratulations to us all! ^_*'
On 2012/08/24 10:51, Shenfeng Liu said:
> I just found it was updated to 3.4.1! Thanks! :)
>
> - Simon
>
>
>
> 2012/8/24 Shenfeng Liu <li...@gmail.com>
>
>> Rob,
>> http://www.openoffice.org/download/ is still pointing to 3.4.0... Is
>> the new page still in staging server?
>>
>> - Simon
>>
>>
>>
>> 2012/8/23 Rob Weir <ro...@apache.org>
>>
>>> The Apache OpenOffice project is pleased to announce the immediate
>>> availability of Apache OpenOffice 3.4.1, the latest release of the
>>> free and open community-developed productivity suite. This
>>> maintenance release builds upon the success of Apache OpenOffice
>>> 3.4.0, which has been downloaded over 12 million times by users in 228
>>> countries, and adds further language support, platform compatibility,
>>> performance enhancements and bug fixes. OpenOffice 3.4.1 can be
>>> downloaded now from http://www.openoffice.org/download/ or by going to
>>> the the Help/Check for Updates dialog within OpenOffice 3.4 or 3.3.
>>>
>>> Further details can be found in our announcement blog post:
>>>
>>> http://blogs.apache.org/OOo/entry/announcing_apache_openoffice_3_41
>>>
>>> Regards,
>>>
>>> -Rob
>>>
>>
>>
>
--
Best regards,
imacat ^_*' <im...@mail.imacat.idv.tw>
PGP Key http://www.imacat.idv.tw/me/pgpkey.asc
<<Woman's Voice>> News: http://www.wov.idv.tw/
Tavern IMACAT's http://www.imacat.idv.tw/
Woman in FOSS in Taiwan http://wofoss.blogspot.com/
Apache OpenOffice http://www.openoffice.org/
EducOO/OOo4Kids Taiwan http://www.educoo.tw/
Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Shenfeng Liu <li...@gmail.com>.
I just found it was updated to 3.4.1! Thanks! :)
- Simon
2012/8/24 Shenfeng Liu <li...@gmail.com>
> Rob,
> http://www.openoffice.org/download/ is still pointing to 3.4.0... Is
> the new page still in staging server?
>
> - Simon
>
>
>
> 2012/8/23 Rob Weir <ro...@apache.org>
>
>> The Apache OpenOffice project is pleased to announce the immediate
>> availability of Apache OpenOffice 3.4.1, the latest release of the
>> free and open community-developed productivity suite. This
>> maintenance release builds upon the success of Apache OpenOffice
>> 3.4.0, which has been downloaded over 12 million times by users in 228
>> countries, and adds further language support, platform compatibility,
>> performance enhancements and bug fixes. OpenOffice 3.4.1 can be
>> downloaded now from http://www.openoffice.org/download/ or by going to
>> the the Help/Check for Updates dialog within OpenOffice 3.4 or 3.3.
>>
>> Further details can be found in our announcement blog post:
>>
>> http://blogs.apache.org/OOo/entry/announcing_apache_openoffice_3_41
>>
>> Regards,
>>
>> -Rob
>>
>
>
Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Shenfeng Liu <li...@gmail.com>.
Rob,
http://www.openoffice.org/download/ is still pointing to 3.4.0... Is the
new page still in staging server?
- Simon
2012/8/23 Rob Weir <ro...@apache.org>
> The Apache OpenOffice project is pleased to announce the immediate
> availability of Apache OpenOffice 3.4.1, the latest release of the
> free and open community-developed productivity suite. This
> maintenance release builds upon the success of Apache OpenOffice
> 3.4.0, which has been downloaded over 12 million times by users in 228
> countries, and adds further language support, platform compatibility,
> performance enhancements and bug fixes. OpenOffice 3.4.1 can be
> downloaded now from http://www.openoffice.org/download/ or by going to
> the the Help/Check for Updates dialog within OpenOffice 3.4 or 3.3.
>
> Further details can be found in our announcement blog post:
>
> http://blogs.apache.org/OOo/entry/announcing_apache_openoffice_3_41
>
> Regards,
>
> -Rob
>
Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Kyabsuchi <ky...@gmail.com>.
I have tried several times to install OpenOffice on System 7. each time I get a message to close the QuickStarter, and the installer terminates, notifying me that the installation is incomplete and the program has not been modified.
Jim Easton
858-527-0240
On Aug 23, 2012, at 7:22, Rob Weir <ro...@apache.org> wrote:
> The Apache OpenOffice project is pleased to announce the immediate
> availability of Apache OpenOffice 3.4.1, the latest release of the
> free and open community-developed productivity suite. This
> maintenance release builds upon the success of Apache OpenOffice
> 3.4.0, which has been downloaded over 12 million times by users in 228
> countries, and adds further language support, platform compatibility,
> performance enhancements and bug fixes. OpenOffice 3.4.1 can be
> downloaded now from http://www.openoffice.org/download/ or by going to
> the the Help/Check for Updates dialog within OpenOffice 3.4 or 3.3.
>
> Further details can be found in our announcement blog post:
>
> http://blogs.apache.org/OOo/entry/announcing_apache_openoffice_3_41
>
> Regards,
>
> -Rob
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
> For additional commands, e-mail: ooo-users-help@incubator.apache.org
>
Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Rob Weir <ro...@apache.org>.
On Fri, Aug 24, 2012 at 7:23 AM, sebb <se...@gmail.com> wrote:
> On 24 August 2012 11:51, Rory O'Farrell <of...@iol.ie> wrote:
>> On Fri, 24 Aug 2012 11:31:05 +0100
>> sebb <se...@gmail.com> wrote:
>>
>>> On 24 August 2012 09:20, Rory O'Farrell <of...@iol.ie> wrote:
>>> > On Thu, 23 Aug 2012 18:01:42 -0400
>>> > "Maurice Howe" <ma...@stny.rr.com> wrote:
>>> >
>>> >> Got a warning msg that your product was unsafe, so I deleted the download.
>>> >> Here's the msg.
>>> > <snip>
>>> >
>>> > I have this morning scanned my Windows XP computer on which is installed yesterday's release of AOO 3.4.1 using AVG Free edition 2012.0.2197 (this morning's update) at the most detailed settings and it has received a clean bill of health.
>>> >
>>> > The question that might arise in connection with the original post is that of the filename/download site; if it is from a legitimate (i.e. Apache controlled site) there should be no worries.
>>> >
>>> > It was in the past not unusual for new releases of OOo to give false positives on many virus scanners - the hooks for online updating registered sometimes as poentialy unwanted programs/possible trojans.
>>> >
>>> > As another poster (Dan?) pointed out, it is possible to check the Md5Sums of the downloaded file against the MD5Sum list on the Apache site, to be certain that it is exactly the file prepared and released by Apache. If these sums check out then all should be well.
>>>
>>> AIUI that's not possible to be *certain* that the file is identical [1].
>>> Hashes are fine for checking that a download has not been
>>> corrupted/truncated in transit, because the chance of a hash collision
>>> in such a case is vanishingly small.
>>>
>>> But they are not generally considered sufficiently robust to *prove*
>>> that the download is what it appears to be.
>>> It is theoretically possible to create two different downloads with
>>> the same hash.
>>>
>>> Obviously if the hash check fails, then there is a problem, but a
>>> successful check does not provide 100% proof.
>>>
>>> Checking the detached signature for the download is much more secure,
>>> but is of course a bit harder to do.
>>>
>>> [1] http://www.apache.org/dev/release-signing#secure-hash-algorithms
>>>
>>> > --
>>> > Rory O'Farrell <of...@iol.ie>
>>>
>>
>> I'm not doubting your remarks above about the possibility of duplicate hashes, but for most purposes the hash check is probably sufficient.
>
> Yes.
>
>> In any event, the timescale involved of some few hours after release would make the possibility of a rogue hash matching file quite remote (I hope!).
>
> Actually there will be at least 3-4 days when the files and hashes are
> available during release votes.
> But more likely the rogue file would be published later when it would
> still catch some downloads.
>
Ideally we'd have a way for the user to verify this themselves,
without getting into command-line tools. For example, a trusted
website with an applet that would verify hash and signature for a
local file. Or could this conceivably be doe with Javascript?
>>
>> --
>> Rory O'Farrell <of...@iol.ie>
Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by sebb <se...@gmail.com>.
On 24 August 2012 11:51, Rory O'Farrell <of...@iol.ie> wrote:
> On Fri, 24 Aug 2012 11:31:05 +0100
> sebb <se...@gmail.com> wrote:
>
>> On 24 August 2012 09:20, Rory O'Farrell <of...@iol.ie> wrote:
>> > On Thu, 23 Aug 2012 18:01:42 -0400
>> > "Maurice Howe" <ma...@stny.rr.com> wrote:
>> >
>> >> Got a warning msg that your product was unsafe, so I deleted the download.
>> >> Here's the msg.
>> > <snip>
>> >
>> > I have this morning scanned my Windows XP computer on which is installed yesterday's release of AOO 3.4.1 using AVG Free edition 2012.0.2197 (this morning's update) at the most detailed settings and it has received a clean bill of health.
>> >
>> > The question that might arise in connection with the original post is that of the filename/download site; if it is from a legitimate (i.e. Apache controlled site) there should be no worries.
>> >
>> > It was in the past not unusual for new releases of OOo to give false positives on many virus scanners - the hooks for online updating registered sometimes as poentialy unwanted programs/possible trojans.
>> >
>> > As another poster (Dan?) pointed out, it is possible to check the Md5Sums of the downloaded file against the MD5Sum list on the Apache site, to be certain that it is exactly the file prepared and released by Apache. If these sums check out then all should be well.
>>
>> AIUI that's not possible to be *certain* that the file is identical [1].
>> Hashes are fine for checking that a download has not been
>> corrupted/truncated in transit, because the chance of a hash collision
>> in such a case is vanishingly small.
>>
>> But they are not generally considered sufficiently robust to *prove*
>> that the download is what it appears to be.
>> It is theoretically possible to create two different downloads with
>> the same hash.
>>
>> Obviously if the hash check fails, then there is a problem, but a
>> successful check does not provide 100% proof.
>>
>> Checking the detached signature for the download is much more secure,
>> but is of course a bit harder to do.
>>
>> [1] http://www.apache.org/dev/release-signing#secure-hash-algorithms
>>
>> > --
>> > Rory O'Farrell <of...@iol.ie>
>>
>
> I'm not doubting your remarks above about the possibility of duplicate hashes, but for most purposes the hash check is probably sufficient.
Yes.
> In any event, the timescale involved of some few hours after release would make the possibility of a rogue hash matching file quite remote (I hope!).
Actually there will be at least 3-4 days when the files and hashes are
available during release votes.
But more likely the rogue file would be published later when it would
still catch some downloads.
>
> --
> Rory O'Farrell <of...@iol.ie>
Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Rory O'Farrell <of...@iol.ie>.
On Fri, 24 Aug 2012 11:31:05 +0100
sebb <se...@gmail.com> wrote:
> On 24 August 2012 09:20, Rory O'Farrell <of...@iol.ie> wrote:
> > On Thu, 23 Aug 2012 18:01:42 -0400
> > "Maurice Howe" <ma...@stny.rr.com> wrote:
> >
> >> Got a warning msg that your product was unsafe, so I deleted the download.
> >> Here's the msg.
> > <snip>
> >
> > I have this morning scanned my Windows XP computer on which is installed yesterday's release of AOO 3.4.1 using AVG Free edition 2012.0.2197 (this morning's update) at the most detailed settings and it has received a clean bill of health.
> >
> > The question that might arise in connection with the original post is that of the filename/download site; if it is from a legitimate (i.e. Apache controlled site) there should be no worries.
> >
> > It was in the past not unusual for new releases of OOo to give false positives on many virus scanners - the hooks for online updating registered sometimes as poentialy unwanted programs/possible trojans.
> >
> > As another poster (Dan?) pointed out, it is possible to check the Md5Sums of the downloaded file against the MD5Sum list on the Apache site, to be certain that it is exactly the file prepared and released by Apache. If these sums check out then all should be well.
>
> AIUI that's not possible to be *certain* that the file is identical [1].
> Hashes are fine for checking that a download has not been
> corrupted/truncated in transit, because the chance of a hash collision
> in such a case is vanishingly small.
>
> But they are not generally considered sufficiently robust to *prove*
> that the download is what it appears to be.
> It is theoretically possible to create two different downloads with
> the same hash.
>
> Obviously if the hash check fails, then there is a problem, but a
> successful check does not provide 100% proof.
>
> Checking the detached signature for the download is much more secure,
> but is of course a bit harder to do.
>
> [1] http://www.apache.org/dev/release-signing#secure-hash-algorithms
>
> > --
> > Rory O'Farrell <of...@iol.ie>
>
I'm not doubting your remarks above about the possibility of duplicate hashes, but for most purposes the hash check is probably sufficient. In any event, the timescale involved of some few hours after release would make the possibility of a rogue hash matching file quite remote (I hope!).
--
Rory O'Farrell <of...@iol.ie>
Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by sebb <se...@gmail.com>.
On 24 August 2012 09:20, Rory O'Farrell <of...@iol.ie> wrote:
> On Thu, 23 Aug 2012 18:01:42 -0400
> "Maurice Howe" <ma...@stny.rr.com> wrote:
>
>> Got a warning msg that your product was unsafe, so I deleted the download.
>> Here's the msg.
> <snip>
>
> I have this morning scanned my Windows XP computer on which is installed yesterday's release of AOO 3.4.1 using AVG Free edition 2012.0.2197 (this morning's update) at the most detailed settings and it has received a clean bill of health.
>
> The question that might arise in connection with the original post is that of the filename/download site; if it is from a legitimate (i.e. Apache controlled site) there should be no worries.
>
> It was in the past not unusual for new releases of OOo to give false positives on many virus scanners - the hooks for online updating registered sometimes as poentialy unwanted programs/possible trojans.
>
> As another poster (Dan?) pointed out, it is possible to check the Md5Sums of the downloaded file against the MD5Sum list on the Apache site, to be certain that it is exactly the file prepared and released by Apache. If these sums check out then all should be well.
AIUI that's not possible to be *certain* that the file is identical [1].
Hashes are fine for checking that a download has not been
corrupted/truncated in transit, because the chance of a hash collision
in such a case is vanishingly small.
But they are not generally considered sufficiently robust to *prove*
that the download is what it appears to be.
It is theoretically possible to create two different downloads with
the same hash.
Obviously if the hash check fails, then there is a problem, but a
successful check does not provide 100% proof.
Checking the detached signature for the download is much more secure,
but is of course a bit harder to do.
[1] http://www.apache.org/dev/release-signing#secure-hash-algorithms
> --
> Rory O'Farrell <of...@iol.ie>
Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Rory O'Farrell <of...@iol.ie>.
On Thu, 23 Aug 2012 18:01:42 -0400
"Maurice Howe" <ma...@stny.rr.com> wrote:
> Got a warning msg that your product was unsafe, so I deleted the download.
> Here's the msg.
<snip>
I have this morning scanned my Windows XP computer on which is installed yesterday's release of AOO 3.4.1 using AVG Free edition 2012.0.2197 (this morning's update) at the most detailed settings and it has received a clean bill of health.
The question that might arise in connection with the original post is that of the filename/download site; if it is from a legitimate (i.e. Apache controlled site) there should be no worries.
It was in the past not unusual for new releases of OOo to give false positives on many virus scanners - the hooks for online updating registered sometimes as poentialy unwanted programs/possible trojans.
As another poster (Dan?) pointed out, it is possible to check the Md5Sums of the downloaded file against the MD5Sum list on the Apache site, to be certain that it is exactly the file prepared and released by Apache. If these sums check out then all should be well.
--
Rory O'Farrell <of...@iol.ie>
RE: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Maurice Howe <ma...@stny.rr.com>.
Dan, here is the msg (attached), sent to both you & ooo-users. Could I be
the only one to get this warning??
Maurice
-----Original Message-----
From: Dan [mailto:elderdanlewis@gmail.com]
Sent: Thursday, August 23, 2012 6:20 PM
To: ooo-users@incubator.apache.org
Cc: Maurice Howe
Subject: Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
How do you know that the product is unsafe? Did you check the digital
signature, or check either the MD5 or SHA25 test for purity? Was the message
from Microsoft? If so, what process does MS use to determine that a software
program is save or unsafe? How accurate are its findings?
Perhaps a web search for Apache OpenOffice or its predecessor
OpenOffice.org might reveal that the message you got was wrong.
--Dan
Maurice Howe wrote:
> Got a warning msg that your product was unsafe, so I deleted the
> download. Here's the msg.
>
> Maurice D. Howe
> General MacArthur Honor Guard Assn
> 616 Lacey Drive
> Endwell, NY 13760
> 607-754-0469
> Maurice@stny.rr.com <ma...@stny.rr.com>
>
>
>
>
>
> -----Original Message-----
> From: Rob Weir [mailto:robweir@apache.org]
> Sent: Thursday, August 23, 2012 10:23 AM
> To: ooo-dev@incubator.apache.org
> Cc: ooo-users@incubator.apache.org
> Subject: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
>
> The Apache OpenOffice project is pleased to announce the immediate
> availability of Apache OpenOffice 3.4.1, the latest release of the
> free and open community-developed productivity suite. This
> maintenance release builds upon the success of Apache OpenOffice
> 3.4.0, which has been downloaded over 12 million times by users in 228
> countries, and adds further language support, platform compatibility,
> performance enhancements and bug fixes. OpenOffice 3.4.1 can be
> downloaded now from http://www.openoffice.org/download/ or by going to
> the the Help/Check for Updates dialog within OpenOffice 3.4 or 3.3.
>
> Further details can be found in our announcement blog post:
>
> http://blogs.apache.org/OOo/entry/announcing_apache_openoffice_3_41
>
> Regards,
>
> -Rob
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
> For additional commands, e-mail: ooo-users-help@incubator.apache.org
>
> -----
> No virus found in this message.
> Checked by AVG - www.avg.com
> Version: 2012.0.2180 / Virus Database: 2437/5218 - Release Date:
> 08/22/12
>
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2012.0.2180 / Virus Database: 2437/5218 - Release Date: 08/22/12
Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Dan <el...@gmail.com>.
How do you know that the product is unsafe? Did you check the
digital signature, or check either the MD5 or SHA25 test for purity? Was
the message from Microsoft? If so, what process does MS use to determine
that a software program is save or unsafe? How accurate are its findings?
Perhaps a web search for Apache OpenOffice or its predecessor
OpenOffice.org might reveal that the message you got was wrong.
--Dan
Maurice Howe wrote:
> Got a warning msg that your product was unsafe, so I deleted the
> download. Here's the msg.
>
> Maurice D. Howe
> General MacArthur Honor Guard Assn
> 616 Lacey Drive
> Endwell, NY 13760
> 607-754-0469
> Maurice@stny.rr.com <ma...@stny.rr.com>
>
>
>
>
>
> -----Original Message-----
> From: Rob Weir [mailto:robweir@apache.org]
> Sent: Thursday, August 23, 2012 10:23 AM
> To: ooo-dev@incubator.apache.org
> Cc: ooo-users@incubator.apache.org
> Subject: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
>
> The Apache OpenOffice project is pleased to announce the immediate
> availability of Apache OpenOffice 3.4.1, the latest release of the free
> and open community-developed productivity suite. This maintenance
> release builds upon the success of Apache OpenOffice 3.4.0, which has
> been downloaded over 12 million times by users in 228 countries, and
> adds further language support, platform compatibility, performance
> enhancements and bug fixes. OpenOffice 3.4.1 can be downloaded now from
> http://www.openoffice.org/download/ or by going to the the Help/Check
> for Updates dialog within OpenOffice 3.4 or 3.3.
>
> Further details can be found in our announcement blog post:
>
> http://blogs.apache.org/OOo/entry/announcing_apache_openoffice_3_41
>
> Regards,
>
> -Rob
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
> For additional commands, e-mail: ooo-users-help@incubator.apache.org
>
> -----
> No virus found in this message.
> Checked by AVG - www.avg.com
> Version: 2012.0.2180 / Virus Database: 2437/5218 - Release Date: 08/22/12
>
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Rory O'Farrell <of...@iol.ie>.
On Fri, 24 Aug 2012 14:26:53 -0400
Rob Weir <ro...@apache.org> wrote:
> On Fri, Aug 24, 2012 at 10:52 AM, Rory O'Farrell <of...@iol.ie> wrote:
> > On Fri, 24 Aug 2012 10:44:34 -0400
> > Rob Weir <ro...@apache.org> wrote:
> >
> >> On Thu, Aug 23, 2012 at 6:43 PM, Rory O'Farrell <of...@iol.ie> wrote:
> >> > On Thu, 23 Aug 2012 18:29:57 -0400
> >> > "Maurice Howe" <ma...@stny.rr.com> wrote:
> >> >
> >> >> I use AVG 2012.0.2180 Free Edition
> >> >>
> >> > I installed AOO 3.4.1 on one of my Windows machines today and AVG didn't complain. I'll check in detail tomorrow when the machine is awake - near midnight here and I'm closing down. It is often the case that new OpenOffice releases trigger false positives from virus scanners.
> >> > --
> >>
> >> I put AVG free version on an XP VM, updated virus signatures,
> >> installed AOO 3.4.1 Windows en-US from the website and did a full
> >> scan. No issues reported.
> >>
> >> So if Maurice was indeed getting an AV hit, that suggests he might
> >> actually have something, either preexisting on his machine, or from
> >> downloading AOO from another website. If it were really a false
> >> positive, wouldn't we be seeing it as well?
> >>
> >> -Rob
> >>
> >> > Rory O'Farrell <ofarrwrk@iol.
> >>
> >
> > I'm sure we would all be seeing a warning if there was an intrinsic problem in the compiled code. Normal reaction from Volunteers on en-Forum is that a virus/malware warning on a new release of OpenOffice from the approved download sites is a false positive and I think so it has always proved; with the transition to Apache special care is needed until the AOO releases become well established, lest there be adverse publicity/comment.
> >
> > It would be helpful if Maurice could tell us the URL of the download site, the actual file name and size.
> >
>
> I finally found the image attachment that Maurice sent out originally.
> It said of the download, it "is not commonly downloaded and could
> harm your computer'".
>
> So this was not a false negative but part of the "reputation-based"
> mechanisms that AV's are starting to use. They look at a variety
> factors, including the age of the EXE and how many other users have
> installed it. If the program is new and not well known, then you will
> get warnings like this. The warnings go away over time. The only way
> to prevent them initially is to have your code be signed, or to
> whitelist your hashes in advance with the AV vendor.
>
> -Rob
>
>
> > --
> > Rory O'Farrell <of...@iol.ie>
>
I've just seen on Forum a similar report, originating from an installed McAfee. I reassured the User, who downloaded and installed, with no further gripes reported from McAfee.
--
Rory O'Farrell <of...@iol.ie>
Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Rob Weir <ro...@apache.org>.
On Fri, Aug 24, 2012 at 10:52 AM, Rory O'Farrell <of...@iol.ie> wrote:
> On Fri, 24 Aug 2012 10:44:34 -0400
> Rob Weir <ro...@apache.org> wrote:
>
>> On Thu, Aug 23, 2012 at 6:43 PM, Rory O'Farrell <of...@iol.ie> wrote:
>> > On Thu, 23 Aug 2012 18:29:57 -0400
>> > "Maurice Howe" <ma...@stny.rr.com> wrote:
>> >
>> >> I use AVG 2012.0.2180 Free Edition
>> >>
>> > I installed AOO 3.4.1 on one of my Windows machines today and AVG didn't complain. I'll check in detail tomorrow when the machine is awake - near midnight here and I'm closing down. It is often the case that new OpenOffice releases trigger false positives from virus scanners.
>> > --
>>
>> I put AVG free version on an XP VM, updated virus signatures,
>> installed AOO 3.4.1 Windows en-US from the website and did a full
>> scan. No issues reported.
>>
>> So if Maurice was indeed getting an AV hit, that suggests he might
>> actually have something, either preexisting on his machine, or from
>> downloading AOO from another website. If it were really a false
>> positive, wouldn't we be seeing it as well?
>>
>> -Rob
>>
>> > Rory O'Farrell <ofarrwrk@iol.
>>
>
> I'm sure we would all be seeing a warning if there was an intrinsic problem in the compiled code. Normal reaction from Volunteers on en-Forum is that a virus/malware warning on a new release of OpenOffice from the approved download sites is a false positive and I think so it has always proved; with the transition to Apache special care is needed until the AOO releases become well established, lest there be adverse publicity/comment.
>
> It would be helpful if Maurice could tell us the URL of the download site, the actual file name and size.
>
I finally found the image attachment that Maurice sent out originally.
It said of the download, it "is not commonly downloaded and could
harm your computer'".
So this was not a false negative but part of the "reputation-based"
mechanisms that AV's are starting to use. They look at a variety
factors, including the age of the EXE and how many other users have
installed it. If the program is new and not well known, then you will
get warnings like this. The warnings go away over time. The only way
to prevent them initially is to have your code be signed, or to
whitelist your hashes in advance with the AV vendor.
-Rob
> --
> Rory O'Farrell <of...@iol.ie>
Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Rory O'Farrell <of...@iol.ie>.
On Fri, 24 Aug 2012 10:44:34 -0400
Rob Weir <ro...@apache.org> wrote:
> On Thu, Aug 23, 2012 at 6:43 PM, Rory O'Farrell <of...@iol.ie> wrote:
> > On Thu, 23 Aug 2012 18:29:57 -0400
> > "Maurice Howe" <ma...@stny.rr.com> wrote:
> >
> >> I use AVG 2012.0.2180 Free Edition
> >>
> > I installed AOO 3.4.1 on one of my Windows machines today and AVG didn't complain. I'll check in detail tomorrow when the machine is awake - near midnight here and I'm closing down. It is often the case that new OpenOffice releases trigger false positives from virus scanners.
> > --
>
> I put AVG free version on an XP VM, updated virus signatures,
> installed AOO 3.4.1 Windows en-US from the website and did a full
> scan. No issues reported.
>
> So if Maurice was indeed getting an AV hit, that suggests he might
> actually have something, either preexisting on his machine, or from
> downloading AOO from another website. If it were really a false
> positive, wouldn't we be seeing it as well?
>
> -Rob
>
> > Rory O'Farrell <ofarrwrk@iol.
>
I'm sure we would all be seeing a warning if there was an intrinsic problem in the compiled code. Normal reaction from Volunteers on en-Forum is that a virus/malware warning on a new release of OpenOffice from the approved download sites is a false positive and I think so it has always proved; with the transition to Apache special care is needed until the AOO releases become well established, lest there be adverse publicity/comment.
It would be helpful if Maurice could tell us the URL of the download site, the actual file name and size.
--
Rory O'Farrell <of...@iol.ie>
Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Rob Weir <ro...@apache.org>.
On Thu, Aug 23, 2012 at 6:43 PM, Rory O'Farrell <of...@iol.ie> wrote:
> On Thu, 23 Aug 2012 18:29:57 -0400
> "Maurice Howe" <ma...@stny.rr.com> wrote:
>
>> I use AVG 2012.0.2180 Free Edition
>>
> I installed AOO 3.4.1 on one of my Windows machines today and AVG didn't complain. I'll check in detail tomorrow when the machine is awake - near midnight here and I'm closing down. It is often the case that new OpenOffice releases trigger false positives from virus scanners.
> --
I put AVG free version on an XP VM, updated virus signatures,
installed AOO 3.4.1 Windows en-US from the website and did a full
scan. No issues reported.
So if Maurice was indeed getting an AV hit, that suggests he might
actually have something, either preexisting on his machine, or from
downloading AOO from another website. If it were really a false
positive, wouldn't we be seeing it as well?
-Rob
> Rory O'Farrell <ofarrwrk@iol.
Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Rory O'Farrell <of...@iol.ie>.
On Thu, 23 Aug 2012 18:29:57 -0400
"Maurice Howe" <ma...@stny.rr.com> wrote:
> I use AVG 2012.0.2180 Free Edition
>
I installed AOO 3.4.1 on one of my Windows machines today and AVG didn't complain. I'll check in detail tomorrow when the machine is awake - near midnight here and I'm closing down. It is often the case that new OpenOffice releases trigger false positives from virus scanners.
--
Rory O'Farrell <ofarrwrk@iol.
RE: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Maurice Howe <ma...@stny.rr.com>.
I use AVG 2012.0.2180 Free Edition
Maurice
-----Original Message-----
From: Rory O'Farrell [mailto:ofarrwrk@iol.ie]
Sent: Thursday, August 23, 2012 6:16 PM
To: ooo-users@incubator.apache.org
Cc: Maurice@stny.rr.com
Subject: Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
On Thu, 23 Aug 2012 18:01:42 -0400
"Maurice Howe" <ma...@stny.rr.com> wrote:
> Got a warning msg that your product was unsafe, so I deleted the download.
> Here's the msg.
>
>
> Maurice D. Howe
> General MacArthur Honor Guard Assn
> 616 Lacey Drive
> Endwell, NY 13760
> 607-754-0469
> Maurice@stny.rr.com
>
>
Which anti-virus? Almost certainly a false positive.
--
Rory O'Farrell <of...@iol.ie>
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2012.0.2180 / Virus Database: 2437/5218 - Release Date: 08/22/12
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
Re: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Rory O'Farrell <of...@iol.ie>.
On Thu, 23 Aug 2012 18:01:42 -0400
"Maurice Howe" <ma...@stny.rr.com> wrote:
> Got a warning msg that your product was unsafe, so I deleted the download.
> Here's the msg.
>
>
> Maurice D. Howe
> General MacArthur Honor Guard Assn
> 616 Lacey Drive
> Endwell, NY 13760
> 607-754-0469
> Maurice@stny.rr.com
>
>
Which anti-virus? Almost certainly a false positive.
--
Rory O'Farrell <of...@iol.ie>
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
RE: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
Posted by Maurice Howe <ma...@stny.rr.com>.
Got a warning msg that your product was unsafe, so I deleted the download.
Here's the msg.
Maurice D. Howe
General MacArthur Honor Guard Assn
616 Lacey Drive
Endwell, NY 13760
607-754-0469
Maurice@stny.rr.com
-----Original Message-----
From: Rob Weir [mailto:robweir@apache.org]
Sent: Thursday, August 23, 2012 10:23 AM
To: ooo-dev@incubator.apache.org
Cc: ooo-users@incubator.apache.org
Subject: [ANNOUNCEMENT] Apache OpenOffice 3.4.1 (incubating) released
The Apache OpenOffice project is pleased to announce the immediate
availability of Apache OpenOffice 3.4.1, the latest release of the free and
open community-developed productivity suite. This maintenance release
builds upon the success of Apache OpenOffice 3.4.0, which has been
downloaded over 12 million times by users in 228 countries, and adds further
language support, platform compatibility, performance enhancements and bug
fixes. OpenOffice 3.4.1 can be downloaded now from
http://www.openoffice.org/download/ or by going to the the Help/Check for
Updates dialog within OpenOffice 3.4 or 3.3.
Further details can be found in our announcement blog post:
http://blogs.apache.org/OOo/entry/announcing_apache_openoffice_3_41
Regards,
-Rob
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2012.0.2180 / Virus Database: 2437/5218 - Release Date: 08/22/12