Precautions Before Downloading Any Open Source Software

We recommend that you take the following precautions before downloading, installing and using open source software.

Is there a chance that I might lose data?

You may lose data either because of a glitch in the software or your unfamiliarity with the software. As usual prudent business practice, make backups of all your data.

It is entirely free, right?

While open source software is free to download and use, there are other costs associated with using it, including time and effort devoted to evaluation, training, obtaining support and hardware needed to install and run it. Have the right expectations and factor these in before you start a project.

Do I need to know about the license?

Be familiar with the license that comes with the software. This depends on your level of confidence and experience and the level of investment that you will be making in the program. Downloading and using the Firefox browser for casual use may not require spending a lot of time. However, if you wish to deploy open source software for mission-critical functions in your business, consulting a legal professional may be a good decision. Specifically, if your plan to use the open source software involves modifying the program source code or redistributing the software it requires careful legal consideration. Refer to our License FAQ for more details.

What is the recommended way to download?

Be cautious in downloading open source programs from sources that you are not familiar with, or that are not well known. Because open source software is free, and others are free to distribute it, many web sites make open source software available for download. It is possible for open source software to be modified to include unwanted, security-compromising features, or bundled with malicious software such as virus or malware:

1. Virus protection software: First, install virus protection software on your computer where you intend downloading and installing free open source software.
2. Trusted sources: Second, use only trusted sources from which to download software and other files such as documentation.
3. Check the integrity of the file: Third, the open source software sites provide a verification code called checksum (also called file digest or in technical terms MD5 Checksum, Hash or SHA1 Hash). For example, the OpenOffice installation instructions say "To check the integrity of the file that you have downloaded, please refer to the md5sums linked from the download page.". Once you download the software, you can verify the checksum provided by the web site with that of the file that you downloaded.You can use the file integrity checker md5deep for this.

Is my network at risk?

Some applications need to be installed on a server that is internet accessible. This will expose your network to all kinds of hazards such as spambots and hackers. Please make sure that you take all public Internet access security precautions or consult a professional.

DIY or call in a professional?

We encourage you to do the evaluation and configuration yourselves to the extent you can. By doing it yourself:

1. You will be able to match up the features of the software with the needs of your business.
2. You would have saved money by not having to pay someone else.
3. Most importantly, you would have gained confidence that you can take on projects of higher level of difficulty the next time around.

1. Skill and comfort level: Have you earlier done a project of this type or similar?
2. Tools: You may need some tools to do the installation, configuration and verification of the software and associated set-up.
3. Time and patience: Do you have the time and patience to see it through.
4. Perseverance: Some projects may require continuous attention for a longer period of time, especially, if you run into unexpected problems. Reassess whether you may want to call in a professional to help.
5. How critical the project is to your business: If the software is mission-critical to your business or if you don't have the IT talent within your business, you may want to bring in a professional or get paid support or both.

How do I minimize risk?

As a prudent business practice, you should consider implementing any significant project in phases, such as:

1. Proof of concept.
2. Limited pilot.
3. Incremental roll-out.