5 ms·

On the plus side I find Fork to be performant and clean. I prefer it over Kraken and Tower and I find it vastly better than SourceTree. I also find it somewhat

by rsp1984 7y ago

On the plus side I find Fork to be performant and clean. I prefer it over Kraken and Tower and I find it vastly better than SourceTree. I also find it somewhat similar to GitX-dev on the Mac, which is a good thing. On the minus side (and it's a big minus), it's not open source. As a developer of commercial software I basically have to trust the Fork developers not to do anything fishy with all the source code / IP that I am opening up to the app.

jjuel 7y ago
Aren't all the other ones you mention closed source as well? Like Kraken and SourceTree for sure.
- sbarre 7y ago
  Sourcetree is provided by Atlassian, a large well-known company. Fork is made by one person. Not making any assumptions here, but if you're evaluating risks around compromises in one of the two products, I think Fork is higher risk.
  - tigroferoce 7y ago
    Moreover, the business model of Sourcetree is somehow clear: attract users to BitBucket, and, hence, to Atlassian. The business model of Fork is unknown, so to me it's a clear no-no. Can't afford to put a tool in my workflow not knowing if in a few months it will become yet another service I must subscribe to
    - EGreg 7y ago
      What’s an open source app for github? Can’t we run gitlab on a local server?
      - tigroferoce 7y ago
        GitHub has a very specific business model and yes, you can run gitlab on your local server.
      - dsumenkovic 7y ago
        You can run GitLab on a local server https://about.gitlab.com/pricing/#self-managed https://about.gitlab.com/pricing/#self-managed
duchenne 7y ago
It is very disappointing that in 2019 we still have to rely on trusting a software vendor or reading the app souce code if it is available. That would be great to we have an OS-level system to give fine-grained permissions and restrictions to desktop apps, like on lineageOS?
- Godel_unicode 7y ago
  How would fine grain permissions solve the problem of software doing something fishy with the code you give it access to?
  - brassattax 7y ago
    White list for network access?
- abstract7 7y ago
  Disabling unsafe and unnecessary sys calls in containers (not Docker) and forcing apps to communicate via API with capabilities management would let you do this now, I think. In fact, sandstorm.io is said to do all this. And it's open-source. I never used it, except the demo. And I'm not sure if its PowerBox (manages capabilities) is fully implemented.
- xorcist 7y ago
  > like on lineageOS? Android/LineageOS is Linux. Just type adduser and sudo, it's not too bad. You'll probably find, however, that it might not be all you were looking for. It can still steal your source code and credentials, which might have been what you were worried about. You will also miss out on your editor, compiler, zip utilities, and whatever else that's not included in your git client. Anything useful would probably look more like privileges (where opening a file can be ok but a network socket forbidden). There's been a ton of research in this area and some very mature systems such as SELinux.

jjuel 7y ago

Aren't all the other ones you mention closed source as well? Like Kraken and SourceTree for sure.

sbarre 7y ago
Sourcetree is provided by Atlassian, a large well-known company. Fork is made by one person. Not making any assumptions here, but if you're evaluating risks around compromises in one of the two products, I think Fork is higher risk.
- tigroferoce 7y ago
  Moreover, the business model of Sourcetree is somehow clear: attract users to BitBucket, and, hence, to Atlassian. The business model of Fork is unknown, so to me it's a clear no-no. Can't afford to put a tool in my workflow not knowing if in a few months it will become yet another service I must subscribe to
  - EGreg 7y ago
    What’s an open source app for github? Can’t we run gitlab on a local server?
    - tigroferoce 7y ago
      GitHub has a very specific business model and yes, you can run gitlab on your local server.
    - dsumenkovic 7y ago
      You can run GitLab on a local server https://about.gitlab.com/pricing/#self-managed https://about.gitlab.com/pricing/#self-managed

duchenne 7y ago

It is very disappointing that in 2019 we still have to rely on trusting a software vendor or reading the app souce code if it is available. That would be great to we have an OS-level system to give fine-grained permissions and restrictions to desktop apps, like on lineageOS?

Godel_unicode 7y ago
How would fine grain permissions solve the problem of software doing something fishy with the code you give it access to?
- brassattax 7y ago
  White list for network access?
abstract7 7y ago
Disabling unsafe and unnecessary sys calls in containers (not Docker) and forcing apps to communicate via API with capabilities management would let you do this now, I think. In fact, sandstorm.io is said to do all this. And it's open-source. I never used it, except the demo. And I'm not sure if its PowerBox (manages capabilities) is fully implemented.
xorcist 7y ago
> like on lineageOS? Android/LineageOS is Linux. Just type adduser and sudo, it's not too bad. You'll probably find, however, that it might not be all you were looking for. It can still steal your source code and credentials, which might have been what you were worried about. You will also miss out on your editor, compiler, zip utilities, and whatever else that's not included in your git client. Anything useful would probably look more like privileges (where opening a file can be ok but a network socket forbidden). There's been a ton of research in this area and some very mature systems such as SELinux.