4 ms·

"even git"? I'm not sure git is the best example of a secure system. Commercial source control systems have more serious authentication.

by TwoBit 11y ago

dietrichepp 11y ago
"Even git" because Git is known to use cryptographic hashes and cryptographically signed tags to verify contents, whereas older systems like SVN and CVS had no such structure.
- nolok 11y ago
  Yeah but what I think he means is that in any field were security is important svn and cvs aren't relevant in anyway. Compared to other in that area, git is not the best.
  - jlgaddis 11y ago
    Of course, OpenBSD uses CVS exclusively.
  - frankzinger 11y ago
    So another poster mentioned Perforce. Which "others" are you referring to?
kingosticks 11y ago
What do they use?
- pfortuny 11y ago
  Probably something with Dual_EC in it...
raverbashing 11y ago
"Commercial source control systems" are usually a steaming piece of crap and I take git over anything that was bought by the higher-ups in ties
gaius 11y ago
Indeed. Serious players use Perforce and consider it to be worth every penny.
- kingosticks 11y ago
  The perforce website just talks about git. Does the old perforce vcs thing still exist?
  - p4thr0waw4y 11y ago
    Yes. Their git stuff is a front-end so users can use git, which then funnels it to the back end. Works like Git-TFS or the built-in integration of Git into Visual Studio. What used to be the central p4 server was renamed Helix, turned into a federated architecture, and there's some sort of data exfiltration protection option that is based on Interset's behavioral analytics stuff. As far as I can tell from the marketing materials, the idea seems to be that if if a coder starts regularly looking at the sales numbers, file a report. Maybe someone needs a reminder about the consequences of insider trading, but maybe they just want to know if the project's getting traction in the real world, and the false alarm can be resolved with a brief chat. If someone tries to clone an entire corporate monorepo on a salesperson's workstation at 3 in the morning local time, shut it down, because the most likely explanation is that the salesperson's workstation has been compromised.
- pkaye 11y ago
  But it certainly was universally hated by the developers at my last employer.

"even git"? I'm not sure git is the best example of a secure system. Commercial source control systems have more serious authentication.

by TwoBit 11y ago

"even git"? I'm not sure git is the best example of a secure system. Commercial source control systems have more serious authentication.

dietrichepp 11y ago

"Even git" because Git is known to use cryptographic hashes and cryptographically signed tags to verify contents, whereas older systems like SVN and CVS had no such structure.

nolok 11y ago
Yeah but what I think he means is that in any field were security is important svn and cvs aren't relevant in anyway. Compared to other in that area, git is not the best.
- jlgaddis 11y ago
  Of course, OpenBSD uses CVS exclusively.
- frankzinger 11y ago
  So another poster mentioned Perforce. Which "others" are you referring to?

kingosticks 11y ago

What do they use?

pfortuny 11y ago
Probably something with Dual_EC in it...

raverbashing 11y ago

"Commercial source control systems" are usually a steaming piece of crap and I take git over anything that was bought by the higher-ups in ties

gaius 11y ago

Indeed. Serious players use Perforce and consider it to be worth every penny.

kingosticks 11y ago
The perforce website just talks about git. Does the old perforce vcs thing still exist?
- p4thr0waw4y 11y ago
  Yes. Their git stuff is a front-end so users can use git, which then funnels it to the back end. Works like Git-TFS or the built-in integration of Git into Visual Studio. What used to be the central p4 server was renamed Helix, turned into a federated architecture, and there's some sort of data exfiltration protection option that is based on Interset's behavioral analytics stuff. As far as I can tell from the marketing materials, the idea seems to be that if if a coder starts regularly looking at the sales numbers, file a report. Maybe someone needs a reminder about the consequences of insider trading, but maybe they just want to know if the project's getting traction in the real world, and the false alarm can be resolved with a brief chat. If someone tries to clone an entire corporate monorepo on a salesperson's workstation at 3 in the morning local time, shut it down, because the most likely explanation is that the salesperson's workstation has been compromised.
pkaye 11y ago
But it certainly was universally hated by the developers at my last employer.