Ricardo Newbery wrote:
> On Feb 7, 2008, at 4:38 AM, Dylan Jay wrote:
>
>> Ricardo Newbery wrote:
>>> On Feb 6, 2008, at 5:54 AM, Dylan Jay wrote:
>>>
>>>> 3. or perhaps just developers can create their own favourite stack
>>>> to
>>>> indicate the products they use regularly.
>>>
>>> Ooo... it would be nice if we had our own
http://iusethis.com>> Actually I was thinking more like
>>
http://www.ohloh.net/projects/70/stacks?page=2&sort=created_at_reverse>>
>> Their model is one stack per developer but for me each site is
>> different
>> and has its own stack. It could be like a mini case study tool where
>> developers can give a mini review of why they chose that stack of
>> plugins. As a bonus that promotes teh site and promotes the developer
>> and the community gets a more accurate picture of which Products are
>> good enough to use. Testing Products for quality takes me forever.
>>
>> Dylan.
>
>
> Hmm... not sure about a per site stack.
>
> Suppose we make this easy and add an optional checkmark in the plone
> control panel that "calls home" and sends the site url, some
> descriptive text, and a list of installed products. What about the
> security implications? If a security exploit is discovered in a
> product, it would make it easy for a bad hat to find a bunch of
> vulnerable sites.
If it was call-home and we don't publish the site url then there is no
security problem right? e.g could show "#sites product is used on",
and/or "products used on site #45454".
> On the flip side, something like this might also make it easier to
> notify participating site owners when exploits are discovered or new
> versions of their products are released. And argument can be made
> that it would probably be better if the site could just anonymously
> subscribe to a "Plone notices & product updates" rss feed but then you
> would loose the data collection opportunity.
its pretty common these days for software to ask during install if the
software can send anonymous statistics back to help improve the product.
This would be no different.
> Like I said, I'm not sure about this. I'm leaning in favor of a non-
> automated per-user stack.
I'd like to see which products got chosen over others and why, to help
me narrow down my choice. An automated way is good. Or perhaps we just
need product shoot-outs where people like me write our evaluation of
products for certain purposes. For instance I'm trying to work out my
options for a pay for membership database. Where would be the best place
to write that up.
Dylan.
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/_______________________________________________
Plone-developers mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/plone-developers