It appears as if much of the open source infrastructure we depend on is suffering from neglect. That’s the message brought to the SouthEast LinuxFest (SELF) by David Nalley. Listening to his talk, “The Tragedy of Open Source,” it was hard not to think that some of our infrastructure projects are beginning to resemble some disintegrating municipal water and sewer systems, or maybe compare his examples with our crumbling roads and bridges. Nalley is a South Carolina based “recovering sysadmin” who now wears many hats at Apache as well as being an employee at Citrix.
The neglect he mentions has caused more than a few near misses that fell inches short of disaster, with two major incidents happening last year alone.
Take the Heartbleed vulnerability that affected openSSL. Nalley points out that last year when the bug was discovered, there was only one person, earning a mere twenty grand a year, actively maintaining the openSSL project. Also last year, there was only one person maintaining bash when Shellshock was discovered.
So far we’ve raised $2,225 of our $6,000 goal. While reaching our target doesn’t appear doable at this late stage of the game — that’s okay. The money that’s been generously contributed will get us started on our planned editorial expansion and you should see us ramping up our coverage considerably in about three or four weeks time, after we receive the funds from IndieGoGo and start putting our new policies in effect.
Somehow I managed to get up on time to make the hour and a half trip from my house to the Charlotte area in plenty of time for the 9 A.M. opening, groggy from only getting about three hours sleep, then wondered why I bothered arriving early. After all, the first presentation I planned to attend wasn’t until 11:30, and with no keynote address scheduled for Friday morning, that left me with a lot of time on my hands.
Newer converts to open source probably don’t know much about the site, but it wasn’t long ago when Linux users were very aware of SourceForge and how to use the service, at least well enough to download software — perhaps more aware than they wanted to be. It was the go-to site when looking for a program not available in a particular distro’s repository. Not anymore. Not for a while. These days, the more important projects have either migrated to GitHub or are hosting their own.
While there have been no injury reports yet from the multitudes simultaneously jumping on the 
