Re: Forum and wiki outage

[Rory O'Farrell]

On Sat, 22 Feb 2025 14:35:00 -0800
Dave Fisher  wrote:

> I have cleaned up the forum session table which had a large number of 
> anonymous sessions.
> 
> I’m monitoring the count which is growing and look to see if the blockage 
> starts again.
> 
> I hope that things will quiet down now.
> 
> Please let me know here about additional issues.
> 
> Best,
> Dave

2500+ connections Sunday morning, response 2 min 30 secs.  This looks like a 
sustained DDoS attack of some kind - quick research shows there are several 
categories of these..
  
-- 
Rory O'Farrell 

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org

Re: Forum and wiki outage

[Bidouille]

I see this occurs only on english forum.
Other NL forums has not have this huge number of guests.
Maybe a solution will be to declare all these bots into the forum ACP.
A registered bot has restricted access and cannot download any attachments.
This could reduce traffic.

- Mail original -
> De: "Rory O'Farrell" 
> À: dev@openoffice.apache.org
> Envoyé: Dimanche 23 Février 2025 10:47:14
> Objet: Re: Forum and wiki outage
> 
> On Sat, 22 Feb 2025 14:35:00 -0800
> Dave Fisher  wrote:
> 
> > I have cleaned up the forum session table which had a large number
> > of anonymous sessions.
> > 
> > I’m monitoring the count which is growing and look to see if the
> > blockage starts again.
> > 
> > I hope that things will quiet down now.
> > 
> > Please let me know here about additional issues.
> > 
> > Best,
> > Dave
> 
> 2500+ connections Sunday morning, response 2 min 30 secs.  This looks
> like a sustained DDoS attack of some kind - quick research shows
> there are several categories of these..
>   
> --
> Rory O'Farrell 
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
> For additional commands, e-mail: dev-h...@openoffice.apache.org
> 
> 

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org

Re: Apache OpenOffice

[Bidouille]

- Mail original -
> From: Travis Newton 
Again a sock puppet account


> As someone who was part of the OpenOffice.org community in 2004 to
> 2009, I have a deep appreciation for what the project represented.
Strange, I've never seen you in the project.


> The reality is that LibreOffice, as a fork of OpenOffice.org, has become
> the clear successor with an active community, frequent releases, and
> strong security practices. For the benefit of open source users, it seems
> time to consider the best path forward for the OpenOffice.org name and
> legacy.
Another working hypothesis would be for this fork to merge to the original 
project :-)

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org

Fwd: Apache OpenOffice

[Brian Proffitt]

Forwarded from pr...@apache.org. If responding, please respond to the
original sender.

-- Forwarded message -
From: Travis Newton 
Date: Sun, Feb 23, 2025 at 7:26 AM
Subject: Apache OpenOffice
To: 


Dear Apache Software Foundation,

I hope this email finds you well. I am writing to inquire about the ongoing
development and distribution of Apache OpenOffice, given its slow
development cycle, multiple outstanding security vulnerabilities, and the
clear momentum of LibreOffice as the primary successor to OpenOffice.org.

As someone who was part of the OpenOffice.org community in 2004 to 2009, I
have a deep appreciation for what the project represented. OpenOffice.org
was a groundbreaking effort in bringing free and open source office
software to users worldwide. It was a powerful alternative to proprietary
office suites, and its impact on open source adoption was undeniable. I was
actually able to bring OpenOffice.org into my school system when we were
faced with financial challenges of obtaining additional Microsoft Office
licenses. The brand itself carries a great deal of history and nostalgia
for many of us who were involved.

However, it is difficult to see OpenOffice.org in its current state, where
its lack of active development makes it increasingly obsolete and
potentially unsafe for users who may not be aware of its stagnation. The
reality is that LibreOffice, as a fork of OpenOffice.org, has become the
clear successor with an active community, frequent releases, and strong
security practices. For the benefit of open source users, it seems time to
consider the best path forward for the OpenOffice.org name and legacy.

As the Apache Software Foundation holds the trademarks for OpenOffice.org,
I wonder if there have been any discussions about how they could be used to
honor the project’s history while guiding users toward an actively
maintained alternative. Whether through formally memorializing
OpenOffice.org’s contributions or even transferring the trademarks to The
Document Foundation, such a step could ensure that users are not left with
an outdated and insecure option when better alternatives exist.

I write this not as a criticism but out of genuine appreciation for the
work that has gone into OpenOffice.org over the years. It is not easy to
let go of something that has been so significant, but sometimes the best
way to honor a legacy is to ensure it is remembered fondly rather than
prolonged beyond its relevance.

I would love to hear your thoughts on this matter and whether the ASF has
considered any options for OpenOffice.org’s future in light of these
concerns.

Thank you for your time and for all the work the ASF does in supporting
open source software.

Best regards,
Travis Newton



Brian Proffitt
VP, Marketing & Publicity
VP, Conferences

Fwd: openoffice

[Brian Proffitt]

Forwarded from apa...@apache.org. If responding, please respond to the
original sender.

-- Forwarded message -
From: Tariq Rashid 
Date: Sun, Feb 23, 2025 at 8:36 AM
Subject: openoffice
To: 


Hi

I notice that OpenOffice is available for download with a 1-year old
unpatched vulnerability.

Many consider it irresponsible that openoffice is still promoted for
download and use because

1. security vulnerabilities are left unpatched compared to other similar
open source projects like Libroffice

2. functionality is falling behind, and this risks giving users a bad
experience, hurting the overall aim of the wider open source movement

The Apache Foundartion itself has flagged security concerns about
OpenOffice: https://en.wikipedia.org/wiki/Apache_OpenOffice#Security

The vast majority of people don't know libreoffice/openoffice exists. A
very very tiny minority know the difference between libreoffice and
openoffice. Sadly more recognise openoffice due to the longer existence of
the name and this can lead to then downloading openoffice.

I urge you to either

1. Stop providing openoffice executables, or

2. Provide HUGE warning about the risks, and provide links to Libroffice.

We are believers in choice and diversity, and this is why openoffice should
always remain available as source code. This is distinct from wanting to
maximise responsible and safe use of open source.

Tariq Rashid
Cornwall
Uk






Brian Proffitt
VP, Marketing & Publicity
VP, Conferences

forum malfunction

[micmac (gmx.fr)]

Hi,

As said yesterday evening, forum was OK ; this morning too.

But from 2025/02/24_0650UTC, new malfunction with same message :
"Your request has been rate limited, as we have detected excessive usage
from your IP or net block:
39.436 SECONDS OF TIME SPENT OVER 300 SECONDS, MAX ALLOWED IS 25.
Rate-limits are automatic and reset every two minutes.
If you feel this is in error, please contact the Apache Infrastructure
Team at: us...@infra.apache.org."

Regards

Re: Forum and wiki outage

[Dean W]

Build a tarpit,
https://arstechnica.com/tech-policy/2025/01/ai-haters-build-tarpits-to-trap-and-trick-ai-scrapers-that-ignore-robots-txt/

On Sun, 23 Feb 2025 at 19:30, Dave Fisher  wrote:

> I have prepared a cleanup script which will be added to run frequently. I
> need some help from Infra to get it properly installed.
>
> This approach to delete excess anonymous sessions has proven effective in
> clearing delays.
>
> I hope that the server will be stable in a day or two.
>
> > On Feb 23, 2025, at 8:43 AM, Bidouille  wrote:
> >
> > I see this occurs only on english forum.
> > Other NL forums has not have this huge number of guests.
> > Maybe a solution will be to declare all these bots into the forum ACP.
> > A registered bot has restricted access and cannot download any
> attachments.
> > This could reduce traffic.
> >
> > - Mail original -
> >> De: "Rory O'Farrell" 
> >> À: dev@openoffice.apache.org
> >> Envoyé: Dimanche 23 Février 2025 10:47:14
> >> Objet: Re: Forum and wiki outage
> >>
> >> On Sat, 22 Feb 2025 14:35:00 -0800
> >> Dave Fisher  wrote:
> >>
> >>> I have cleaned up the forum session table which had a large number
> >>> of anonymous sessions.
> >>>
> >>> I’m monitoring the count which is growing and look to see if the
> >>> blockage starts again.
> >>>
> >>> I hope that things will quiet down now.
> >>>
> >>> Please let me know here about additional issues.
> >>>
> >>> Best,
> >>> Dave
> >>
> >> 2500+ connections Sunday morning, response 2 min 30 secs.  This looks
> >> like a sustained DDoS attack of some kind - quick research shows
> >> there are several categories of these..
> >>
> >> --
> >> Rory O'Farrell 
> >>
> >> -
> >> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
> >> For additional commands, e-mail: dev-h...@openoffice.apache.org
> >>
> >>
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
> > For additional commands, e-mail: dev-h...@openoffice.apache.org
> >
>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
> For additional commands, e-mail: dev-h...@openoffice.apache.org
>
>

Re: Reporting broken download link

[Precept Fred]

Typical windows- had to update windows web browser. Wouldn’t give me an error 
or a statement to that effect. Stumbled upon the issue while poking around. 

Appreciate your getting back to me.  But now resolved. Maybe keep in mind for 
others. 

Am primarily an Apple user but have a windows machine for my once a year tax 
stuff for family. 

Again many thanks for getting back. 

Best Regards
Fred 
Sent from my iPhone

> On Feb 22, 2025, at 7:16 PM, Marcus  wrote:
> 
> Am 22.02.25 um 22:17 schrieb Precept Fred:
>> mailto:dev@openoffice.apache.org
>> ?subject=Reporting%20broken%20download%20link
>> Am trying to update open office, but the security scan goes to the Forge
>> link and stops. No verification takes place.
> 
> I've downloaded a second ago and haven't seen a problem. So, in general it's 
> working.
> 
> When you have problems with specific mirror servers then just change them. On 
> the SourceForge webpage there is a grey "Problems Downloading?" button. Just 
> click on it and choose a different mirror from the popup dialog.
> 
> HTH
> 
> Marcus
> 
> 
> 
>> *Problem description*
>> *Exchange this text to describe the problem (What does not work? What do
>> you expect?)*
>> *Browser variables**Values*
>> ...
> 

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org

Re: Forum and wiki outage

[casalva]

Thank you.
The forum is still locked.
c.






domenica 23 febbraio 2025 10:47, Rory O'Farrell  ha scritto:

> On Sat, 22 Feb 2025 14:35:00 -0800
> Dave Fisher w...@apache.org wrote:
> 
> > I have cleaned up the forum session table which had a large number of 
> > anonymous sessions.
> > 
> > I’m monitoring the count which is growing and look to see if the blockage 
> > starts again.
> > 
> > I hope that things will quiet down now.
> > 
> > Please let me know here about additional issues.
> > 
> > Best,
> > Dave
> 
> 
> 2500+ connections Sunday morning, response 2 min 30 secs. This looks like a 
> sustained DDoS attack of some kind - quick research shows there are several 
> categories of these..
> 
> --
> Rory O'Farrell ofarr...@iol.ie
> 
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
> For additional commands, e-mail: dev-h...@openoffice.apache.org

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org

Re: Forum and wiki outage

[casalva]

I see this messagge:
"Your request has been rate limited, as we have detected excessive usage from 
your IP or net block:
51.266 SECONDS OF TIME SPENT OVER 300 SECONDS, MAX ALLOWED IS 25.
Rate-limits are automatic and reset every two minutes.
If you feel this is in error, please contact the Apache Infrastructure Team at: 
us...@infra.apache.org."




Inviato con l'email sicura Proton Mail.

domenica 23 febbraio 2025 12:03, casalva  ha scritto:

> Thank you.
> The forum is still locked.
> c.
> 
> 
> 
> 
> 
> 
> domenica 23 febbraio 2025 10:47, Rory O'Farrell ofarr...@iol.ie ha scritto:
> 
> > On Sat, 22 Feb 2025 14:35:00 -0800
> > Dave Fisher w...@apache.org wrote:
> > 
> > > I have cleaned up the forum session table which had a large number of 
> > > anonymous sessions.
> > > 
> > > I’m monitoring the count which is growing and look to see if the blockage 
> > > starts again.
> > > 
> > > I hope that things will quiet down now.
> > > 
> > > Please let me know here about additional issues.
> > > 
> > > Best,
> > > Dave
> > 
> > 2500+ connections Sunday morning, response 2 min 30 secs. This looks like a 
> > sustained DDoS attack of some kind - quick research shows there are several 
> > categories of these..
> > 
> > --
> > Rory O'Farrell ofarr...@iol.ie
> > 
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
> > For additional commands, e-mail: dev-h...@openoffice.apache.org

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org

FrenchOO Forum

[micmac (gmx.fr)]

Hi,

Right now (2025/02/23_1735UTC), french forum operates as usual.
Thanks for all.

Regards

Re: Forum and wiki outage

[Dave Fisher]

I have prepared a cleanup script which will be added to run frequently. I need 
some help from Infra to get it properly installed.

This approach to delete excess anonymous sessions has proven effective in 
clearing delays.

I hope that the server will be stable in a day or two.

> On Feb 23, 2025, at 8:43 AM, Bidouille  wrote:
> 
> I see this occurs only on english forum.
> Other NL forums has not have this huge number of guests.
> Maybe a solution will be to declare all these bots into the forum ACP.
> A registered bot has restricted access and cannot download any attachments.
> This could reduce traffic.
> 
> - Mail original -
>> De: "Rory O'Farrell" 
>> À: dev@openoffice.apache.org
>> Envoyé: Dimanche 23 Février 2025 10:47:14
>> Objet: Re: Forum and wiki outage
>> 
>> On Sat, 22 Feb 2025 14:35:00 -0800
>> Dave Fisher  wrote:
>> 
>>> I have cleaned up the forum session table which had a large number
>>> of anonymous sessions.
>>> 
>>> I’m monitoring the count which is growing and look to see if the
>>> blockage starts again.
>>> 
>>> I hope that things will quiet down now.
>>> 
>>> Please let me know here about additional issues.
>>> 
>>> Best,
>>> Dave
>> 
>> 2500+ connections Sunday morning, response 2 min 30 secs.  This looks
>> like a sustained DDoS attack of some kind - quick research shows
>> there are several categories of these..
>> 
>> --
>> Rory O'Farrell 
>> 
>> -
>> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
>> For additional commands, e-mail: dev-h...@openoffice.apache.org
>> 
>> 
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
> For additional commands, e-mail: dev-h...@openoffice.apache.org
> 


-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org

Re: Apache OpenOffice

[Peter kovacs]

Hello Travis,

To my knowledge the TDF has no interest in the OpenOffice IP. The TDF has 
expressed clearly in their Open Letter [1] that they wish that The Apache 
OpenOffice Project abandons the development, and recommend Libre Office as the 
only successor.

I think open source can do better then producing Abandon ware. This is an 
enterprise logic, while we are a community based project. This is especially 
reflected in the Apache OpenOffice Forums where a lot of volunteers are active 
who are using Libre or OpenOffice. We have active Moderators who switched to 
Libre office completely, and we value their ongoing engagement in their role.
I think it makes clear that the Apache OpenOffice Project values the Community 
as whole. It would be fantastic if the narrative would catch more in the 
community.

I hope you can follow my position and respect it.

All the best
Peter

[1] 


Am 23. Februar 2025 19:41:04 MEZ schrieb Bidouille :
>- Mail original -
>> From: Travis Newton 
>Again a sock puppet account
>
>
>> As someone who was part of the OpenOffice.org community in 2004 to
>> 2009, I have a deep appreciation for what the project represented.
>Strange, I've never seen you in the project.
>
>
>> The reality is that LibreOffice, as a fork of OpenOffice.org, has become
>> the clear successor with an active community, frequent releases, and
>> strong security practices. For the benefit of open source users, it seems
>> time to consider the best path forward for the OpenOffice.org name and
>> legacy.
>Another working hypothesis would be for this fork to merge to the original 
>project :-)
>
>-
>To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
>For additional commands, e-mail: dev-h...@openoffice.apache.org
>