Re: Security Bug Report Contact
My apologies if my tone was somewhat harsh but I am concerned about the way it is handled when compared to WordPress. WordPress security upgrade was pushed in record time of 4 hours. I am not blaming JJJ or anybody else.
Its something I would have feel if I was a non-technical guy running bbPress unknowingly that my forums are vulnerable.
How WordPress community would have reacted if a WP bug wasn’t fixed asap? They would obviously curse the people behind WordPress but since bbPress is a little pond, that doesn’t mean it should wait for 1 week. I know how much difference does it make when there are several developers on a project as compared to when there are only a few.
I understand JJJ didn’t have proper access to internet but I really expected an update on Jan 3 & we haven’t got anything till now. May be there are issues which needs to be fixed before a release is pushed live but I certainly don’t feel right about it.
That said, its all my opinion and it doesn’t intend to pinpoint any individual. For the record, I am only blaming the situation.
I hope JJJ didn’t mind my tone. If he did, I apologize once again. I am just in favor of the bbPress community. JJJ, if you remember, I was the one who brought this topic to your attention on IRC.
P.S. – I don’t run even a single forum of my own and views are certainly not biased for only my favor.
