2 ms·
You are right, instead of "every possible measure", it should be "every reasonable measure", where reasonable is defined by the cost-benefit analysis you mentio
by zomglings 6y ago
You are right, instead of "every possible measure", it should be "every reasonable measure", where reasonable is defined by the cost-benefit analysis you mentioned.
It is hard to think of an instance where not open sourcing your server code has a high cost. It is easy to think of instances where open sourcing it has high cost - e.g. leaked deployment keys, mistakenly committed data - both of which I have seen happen in the wild working with healthcare data.
- xyzzy123 6y agoYou have a valid point and open-sourcing definitely creates known risks we could enumerate without too much trouble. If open-source were part of your mission then you would have to treat those risks like all the other risks you assume by providing your service or doing business at all. If not, then I agree that closed-sourcing looks more attractive in most cases.