3 ms·

> On the other hand, does anyone know if a company that small has any viable way to defend themselves against someone with deep pockets like Elastic? The Searc

by quink 7y ago

> On the other hand, does anyone know if a company that small has any viable way to defend themselves against someone with deep pockets like Elastic? The Search Guard code has been taken by Amazon and rebadged as https://github.com/opendistro-for-elasticsearch/security https://github.com/opendistro-for-elasticsearch/security So they're not really fighting Search Guard at all. They're fighting Amazon with this. And Amazon would probably (and certainly has the money and business case) to rather buy out Elastic than to lose this lawsuit by proxy - and maybe that's what Elastic is actually playing at.

geofft 7y ago
.... did Amazon really not get someone to compare the sources against the sources of X-Pack before redistributing it? It feels like you could just hire an outside contractor to double-check it and not contaminate yourselves.
- quink 7y ago
  Now that I've had a look, it seems like ODES doesn't contain the particular change that floragunn had put into Search Guard that is mentioned in the filing, so at least in that particular instance that's not directly linked. I still think however that Amazon will feel very involved.
  - narism 7y ago
    The code is still there even if the commit isn't: https://github.com/opendistro-for-elasticsearch/security-advanced-modules/blob/96b39c04c8ae25d214cc4c521d89a324935b7a7c/src/main/java/com/amazon/opendistroforelasticsearch/security/configuration/DlsFlsFilterLeafReader.java#L922-L951 https://github.com/opendistro-for-elasticsearch/security-adv...
    - quink 7y ago
      Ah, my mistake, I had looked in the security repo, not this one.
jrochkind1 7y ago
Aha, that is important subtext. Of course, ES and Amazon have been fighting a battle (of words/ideas/dislike) for a while now, since Amazon released a hosted ES, and an ES distro. So this is part of that battle. https://www.cnbc.com/2019/03/12/aws-open-source-move-sends-elastic-stock-down.html https://www.cnbc.com/2019/03/12/aws-open-source-move-sends-e...

by quink 7y ago

geofft 7y ago

.... did Amazon really not get someone to compare the sources against the sources of X-Pack before redistributing it? It feels like you could just hire an outside contractor to double-check it and not contaminate yourselves.

quink 7y ago
Now that I've had a look, it seems like ODES doesn't contain the particular change that floragunn had put into Search Guard that is mentioned in the filing, so at least in that particular instance that's not directly linked. I still think however that Amazon will feel very involved.
- narism 7y ago
  The code is still there even if the commit isn't: https://github.com/opendistro-for-elasticsearch/security-advanced-modules/blob/96b39c04c8ae25d214cc4c521d89a324935b7a7c/src/main/java/com/amazon/opendistroforelasticsearch/security/configuration/DlsFlsFilterLeafReader.java#L922-L951 https://github.com/opendistro-for-elasticsearch/security-adv...
  - quink 7y ago
    Ah, my mistake, I had looked in the security repo, not this one.

jrochkind1 7y ago

Aha, that is important subtext. Of course, ES and Amazon have been fighting a battle (of words/ideas/dislike) for a while now, since Amazon released a hosted ES, and an ES distro. So this is part of that battle. https://www.cnbc.com/2019/03/12/aws-open-source-move-sends-elastic-stock-down.html https://www.cnbc.com/2019/03/12/aws-open-source-move-sends-e...