Timeline for Can I trust public code versioning platforms when building a social platform?
Current License: CC BY-SA 4.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 5, 2019 at 16:17 | comment | added | Lightness Races in Orbit | I'm not sure that "unfortunately" is the right word | |
| Feb 5, 2019 at 8:20 | vote | accept | ooouuiii | ||
| Feb 4, 2019 at 15:23 | comment | added | Mason Wheeler | "Personally, I would not feel confident about providing a service to users where its security relies on the source code not being open source." Exactly. It's always important to remember Kerckhoff's Principle here: your threat assessments should always begin with the assumption that "the adversary knows the system." | |
| Feb 4, 2019 at 14:23 | comment | added | Conor Mancone | @Qwertie that should really be the only answer to this question... | |
| Feb 4, 2019 at 5:07 | comment | added | Qwertie | @ooouuiii The source code is worth less than you might think. Its unlikely you have developed anything revolutionary as any competent developer could build a website for 1M users. The real value is in the marketing, business side and userbase. If someone wanted to compete with you they would write their own software which would suit their needs better and be better understood by them. | |
| Feb 4, 2019 at 1:25 | history | edited | Simon | CC BY-SA 4.0 |
added 4 characters in body
|
| Feb 3, 2019 at 15:39 | comment | added | ooouuiii | Thank you for great feedback. Both points are completely valid. We are going to open source lots of the code-base, when the service succeed. While the security is part of the design, I want independent audit first. Different aspect is, we already invested months of the development time, solved lots of problems and we cannot lose this as our starting advantage if it shows, the market wants this kind of platform.We can start e.g. our own virtual server with git server, then we have to take care of security patches of the server. In this stage, we are mainly developers, not sysadmins / devops. | |
| Feb 3, 2019 at 15:13 | history | answered | Simon | CC BY-SA 4.0 |