Timeline for Can I trust public code versioning platforms when building a social platform?
Current License: CC BY-SA 4.0
21 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 5, 2019 at 12:35 | comment | added | Markus W Mahlberg | And even for something like bitbucket: I pray on a daily basis that they compromise any code I have in private repositories. The damages and compensation to be expected of a class action suit will surely be worth a lot more than the code stored... | |
| Feb 5, 2019 at 8:24 | answer | added | user6858980 | timeline score: 1 | |
| Feb 5, 2019 at 8:20 | vote | accept | ooouuiii | ||
| Feb 5, 2019 at 1:22 | comment | added | crasic | Specifically, gitlab is one of the few platforms that has a turn-key self-hosted free/oss solution, so if you like git, gitlab, and gitlab ci/cd it is not out of the question for a small team to self-host, eliminating all your concerns. I manage a 30 user set up as an EE, it can't be that hard :) | |
| Feb 4, 2019 at 22:01 | comment | added | ooouuiii | Great lesson all these hints. I know the source code is not the most imoprtant asset. Imagine your early project stage is half a year of intensive development in spare time. No miracle, but you are building horizontally scalable app with different cacheing layers with edge technologies, that sometimes doesn't have mature solution for your problems. If we got current source in the beginning, it would definitely helped us to be farther today. I want to contribute to OS, but first, I want the opportunity to succeed with it. Do you think e.g.paypall would, if they go OS from start, when Cofinity? | |
| Feb 4, 2019 at 20:19 | answer | added | Maxim Kuleshov | timeline score: 5 | |
| Feb 4, 2019 at 11:55 | comment | added | eckes | If you worry about unauthorized changes to your code you can have a local copy and verify the commit history regularly. Git is good in representing the entire tree/commit history with a single hash. | |
| Feb 4, 2019 at 10:31 | comment | added | Bergi | "code versioning platform" - you really need to distinguish the code versioning tool (Git), the code repository server (Gitlab), and the DevOps platform (Gitlab CI). Those are all independent from each other. | |
| S Feb 4, 2019 at 8:21 | history | suggested | Peter Mortensen | CC BY-SA 4.0 |
Copy edited (e.g. ref. <https://en.wikipedia.org/wiki/GitLab> and <https://en.wikipedia.org/wiki/DevOps> and <http://en.wikipedia.org/wiki/Bitbucket>). [(its = possessive, it's = "it is" or "it has". See for example <http://www.wikihow.com/Use-Its-and-It%27s>.)]
|
| Feb 4, 2019 at 8:18 | review | Suggested edits | |||
| S Feb 4, 2019 at 8:21 | |||||
| Feb 4, 2019 at 7:52 | comment | added | code_dredd | You don't need Gitlab to host your repository. You can send patches via email just like it's done in Linux kernel development, sending patches back and forth, with everyone having their own clone of the repo, etc. Even the GitHub page is simply a backup mirror for the Linux Kernel itself. | |
| Feb 4, 2019 at 6:10 | comment | added | kasperd | There is no such thing as a completely legal and ethical social platform. If it gets popular it will attract people from many countries, and countries have different laws which aren't always compatible. And people have different ideas of what's ethical. And let's not ignore the fact that there are countries with laws regarding social networks that most people consider unethical. | |
| Feb 4, 2019 at 3:50 | comment | added | qwr | The legality of "selling your code" falls under what code license you use and Gitlab's terms of service. You also must obey whatever the laws of whatever nation has jurisdiction over the code (I'm not sure about the details) | |
| Feb 4, 2019 at 1:15 | answer | added | Adam Barnes | timeline score: 23 | |
| Feb 4, 2019 at 0:00 | history | tweeted | twitter.com/StackSecurity/status/1092211225176481795 | ||
| Feb 3, 2019 at 23:03 | comment | added | multithr3at3d | Note that if you are really concerned, you could host your own GitLab or other platform. You mention infrastructure as an issue, but this could easily be done on a free hosting platform. | |
| Feb 3, 2019 at 20:42 | comment | added | marcelm | "investigate the source and find [...] some sensitive configuration." - (Sensitive) configuration should not be in the source repo in the first place ;) | |
| Feb 3, 2019 at 15:27 | comment | added | Ella Rose |
Some people might say ... any service of this kind must protect privacy of it's users. while keeping your source code private is a contradiction. Privacy aficionados aren't exactly wild about closed-source software.
|
|
| Feb 3, 2019 at 15:13 | answer | added | Simon | timeline score: 69 | |
| Feb 3, 2019 at 14:50 | review | First posts | |||
| Feb 3, 2019 at 21:59 | |||||
| Feb 3, 2019 at 14:45 | history | asked | ooouuiii | CC BY-SA 4.0 |