You are viewing a plain text version of this content. The canonical link for it is here.
Posted to marketing@openoffice.apache.org by Rob Weir <ro...@apache.org> on 2013/12/05 15:47:26 UTC

Call for Comments: Apache OpenOffice Distributor Best Practices

Details are here:

https://blogs.apache.org/OOo/entry/call_for_comments_apache_openoffice

Regards,

-Rob

---------------------------------------------------------------------
To unsubscribe, e-mail: marketing-unsubscribe@openoffice.apache.org
For additional commands, e-mail: marketing-help@openoffice.apache.org


Re: Call for Comments: Apache OpenOffice Distributor Best Practices

Posted by Shari Lynn Smith <we...@gmail.com>.
I think this is a good idea. For reasons already outlined. It would also
give people a place to find honorable ways to get a copy instead of a cheap
CD with a 3 yo version.

I do think maintaining the list may be difficult. Maybe allow some type of
rating? I also think some type of revoking policy would need to be set up.
 On Dec 5, 2013 8:47 AM, "Rob Weir" <ro...@apache.org> wrote:

> Details are here:
>
> https://blogs.apache.org/OOo/entry/call_for_comments_apache_openoffice
>
> Regards,
>
> -Rob
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
> For additional commands, e-mail: dev-help@openoffice.apache.org
>
>

Re: Call for Comments: Apache OpenOffice Distributor Best Practices

Posted by Tom Morrow <mo...@gmail.com>.
I believe adding a third party would lead to potential problems and
complications.

On 12/5/13, Rob Weir <ro...@apache.org> wrote:
> Details are here:
>
> https://blogs.apache.org/OOo/entry/call_for_comments_apache_openoffice
>
> Regards,
>
> -Rob
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
> For additional commands, e-mail: users-help@openoffice.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
For additional commands, e-mail: users-help@openoffice.apache.org


Re: Call for Comments: Apache OpenOffice Distributor Best Practices

Posted by Andrea Pescetti <pe...@apache.org>.
On 22/01/2014 Rob Weir wrote:
> As the first screen of the install program have a screen that says:
> "Important:  If you did not download this program from a known safe
> website then you may be at risk from viruses, etc.  Apache OpenOffice
> is free for all users.  You should not need to pay for it.  If
> immediately before this screen you were asked to install other
> software applications, or asked to authorize payment for OpenOffice,
> then you may have been scammed.  Read here for more information..."

If done with the right wording (in a way that ensures that even users 
who don't read won't go into "panic mode" and start asking for support), 
this would indeed be a clever solution.

At least the "Apache OpenOffice is free for all users" message is very 
useful to people who do not download from the official site.

Regards,
   Andrea.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
For additional commands, e-mail: dev-help@openoffice.apache.org


Re: Call for Comments: Apache OpenOffice Distributor Best Practices

Posted by Rob Weir <ro...@apache.org>.
On Wed, Jan 22, 2014 at 11:05 AM, Donald Whytock <dw...@apache.org> wrote:
> On Mon, Jan 20, 2014 at 2:14 PM, Rob Weir <ro...@apache.org> wrote:
>
>> On Thu, Dec 5, 2013 at 9:47 AM, Rob Weir <ro...@apache.org> wrote:
>> > Details are here:
>> >
>> > https://blogs.apache.org/OOo/entry/call_for_comments_apache_openoffice
>> >
>>
>> It has been over a month since we put out this call for comments.  You
>> can see some of them in this thread, as well as with the blog post:
>>
>>
>> https://blogs.apache.org/OOo/entry/call_for_comments_apache_openoffice#comments
>>
>> The response was generally positive.  However, the volume of responses
>> was rather low.  So I do wonder whether there is a large unmet need
>> for this.  For example, we have not (to my knowledge) received
>> requests for a CD on the mailing list in months now.
>>
>> Another data point:  the webpage that is #1 in Google search results
>> for the query "openoffice cd" is:
>>
>> http://www.openoffice.org/distribution/cdrom/
>>
>> It receives around 7 visits per day.  Any proposal we came up with
>> would be findable to user mainly through that same mechanism --
>> searching Google.   Is it worth setting something up for 7 users per
>> day?
>>
>> Note:  if we removed our web pages that discuss OpenOffice CD's, the
>> top link would be a vendor on Amazon.com selling an OpenOffice CD.  So
>> in a sense, if we just "get out of the way", it would tend to work.
>> The risk would be if we see vendors starting to scam users.
>>
>> Next steps?  If anyone really wants to have a CD distributor listing,
>> I can help.  But it is not sufficiently high on my priority list to
>> carry this by myself.  Someone else would need to take the lead.
>>
>> Regards,
>>
>> -Rob
>>
>
> If you want to take a "get out of the way" approach, would you nevertheless
> want to put up signature files for official releases, such that anything
> one does buy can at least be verified before it's installed?
>

I think getting our installers digitally signed is important for many
reasons.  At the very least it reduces user confusion during the
download and install process.

However it won't prevent the most common kinds of abuses.  We're not
really seeing people modify the AOO installer and putting malware into
the AOO installer.  What we see is someone creating a new "installer"
or "downloader" and advertising that for the users to download.  This
program installs the malware and then as the last step it downloads
and installs the original, unmodified AOO installer.

So even if we are digitally signed, it doesn't help in this case.  The
damage is already done before the real AOO installer is even launched.

One idea, and maybe this would cause users to panic more than we want
to, would be this:

As the first screen of the install program have a screen that says:

"Important:  If you did not download this program from a known safe
website then you may be at risk from viruses, etc.  Apache OpenOffice
is free for all users.  You should not need to pay for it.  If
immediately before this screen you were asked to install other
software applications, or asked to authorize payment for OpenOffice,
then you may have been scammed.  Read here for more information..."

Of course, we have nothing officially against selling OpenOffice, etc.
 So we would want to make it easier for a real programmer to disable
this screen in the installer.  But it might have some value.   But it
is coming one step too late to really prevent the problem.

Regards,

-Rob


> Might be too late at that point to get one's money back, but it could save
> the buyer some grief with his machine.  And give the buyer grounds to out a
> fraudulent purveyor.
>
> Don

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
For additional commands, e-mail: dev-help@openoffice.apache.org


Re: Call for Comments: Apache OpenOffice Distributor Best Practices

Posted by Donald Whytock <dw...@apache.org>.
On Mon, Jan 20, 2014 at 2:14 PM, Rob Weir <ro...@apache.org> wrote:

> On Thu, Dec 5, 2013 at 9:47 AM, Rob Weir <ro...@apache.org> wrote:
> > Details are here:
> >
> > https://blogs.apache.org/OOo/entry/call_for_comments_apache_openoffice
> >
>
> It has been over a month since we put out this call for comments.  You
> can see some of them in this thread, as well as with the blog post:
>
>
> https://blogs.apache.org/OOo/entry/call_for_comments_apache_openoffice#comments
>
> The response was generally positive.  However, the volume of responses
> was rather low.  So I do wonder whether there is a large unmet need
> for this.  For example, we have not (to my knowledge) received
> requests for a CD on the mailing list in months now.
>
> Another data point:  the webpage that is #1 in Google search results
> for the query "openoffice cd" is:
>
> http://www.openoffice.org/distribution/cdrom/
>
> It receives around 7 visits per day.  Any proposal we came up with
> would be findable to user mainly through that same mechanism --
> searching Google.   Is it worth setting something up for 7 users per
> day?
>
> Note:  if we removed our web pages that discuss OpenOffice CD's, the
> top link would be a vendor on Amazon.com selling an OpenOffice CD.  So
> in a sense, if we just "get out of the way", it would tend to work.
> The risk would be if we see vendors starting to scam users.
>
> Next steps?  If anyone really wants to have a CD distributor listing,
> I can help.  But it is not sufficiently high on my priority list to
> carry this by myself.  Someone else would need to take the lead.
>
> Regards,
>
> -Rob
>

If you want to take a "get out of the way" approach, would you nevertheless
want to put up signature files for official releases, such that anything
one does buy can at least be verified before it's installed?

Might be too late at that point to get one's money back, but it could save
the buyer some grief with his machine.  And give the buyer grounds to out a
fraudulent purveyor.

Don

Re: Call for Comments: Apache OpenOffice Distributor Best Practices

Posted by Rob Weir <ro...@apache.org>.
On Thu, Dec 5, 2013 at 9:47 AM, Rob Weir <ro...@apache.org> wrote:
> Details are here:
>
> https://blogs.apache.org/OOo/entry/call_for_comments_apache_openoffice
>

It has been over a month since we put out this call for comments.  You
can see some of them in this thread, as well as with the blog post:

https://blogs.apache.org/OOo/entry/call_for_comments_apache_openoffice#comments

The response was generally positive.  However, the volume of responses
was rather low.  So I do wonder whether there is a large unmet need
for this.  For example, we have not (to my knowledge) received
requests for a CD on the mailing list in months now.

Another data point:  the webpage that is #1 in Google search results
for the query "openoffice cd" is:

http://www.openoffice.org/distribution/cdrom/

It receives around 7 visits per day.  Any proposal we came up with
would be findable to user mainly through that same mechanism --
searching Google.   Is it worth setting something up for 7 users per
day?

Note:  if we removed our web pages that discuss OpenOffice CD's, the
top link would be a vendor on Amazon.com selling an OpenOffice CD.  So
in a sense, if we just "get out of the way", it would tend to work.
The risk would be if we see vendors starting to scam users.

Next steps?  If anyone really wants to have a CD distributor listing,
I can help.  But it is not sufficiently high on my priority list to
carry this by myself.  Someone else would need to take the lead.

Regards,

-Rob


> Regards,
>
> -Rob

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
For additional commands, e-mail: dev-help@openoffice.apache.org


Re: Call for Comments: Apache OpenOffice Distributor Best Practices

Posted by Shari Lynn Smith <we...@gmail.com>.
I think this is a good idea. For reasons already outlined. It would also
give people a place to find honorable ways to get a copy instead of a cheap
CD with a 3 yo version.

I do think maintaining the list may be difficult. Maybe allow some type of
rating? I also think some type of revoking policy would need to be set up.
 On Dec 5, 2013 8:47 AM, "Rob Weir" <ro...@apache.org> wrote:

> Details are here:
>
> https://blogs.apache.org/OOo/entry/call_for_comments_apache_openoffice
>
> Regards,
>
> -Rob
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
> For additional commands, e-mail: dev-help@openoffice.apache.org
>
>

Re: Call for Comments: Apache OpenOffice Distributor Best Practices

Posted by Shari Lynn Smith <we...@gmail.com>.
I think this is a good idea. For reasons already outlined. It would also
give people a place to find honorable ways to get a copy instead of a cheap
CD with a 3 yo version.

I do think maintaining the list may be difficult. Maybe allow some type of
rating? I also think some type of revoking policy would need to be set up.
 On Dec 5, 2013 8:47 AM, "Rob Weir" <ro...@apache.org> wrote:

> Details are here:
>
> https://blogs.apache.org/OOo/entry/call_for_comments_apache_openoffice
>
> Regards,
>
> -Rob
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
> For additional commands, e-mail: dev-help@openoffice.apache.org
>
>