3 ms·

That seems to be about transitioning to an open-source model. I don't mean that. I mean simply having their git repo publicly accesible in a read-only fashion.

That seems to be about transitioning to an open-source model. I don't mean that. I mean simply having their git repo publicly accesible in a read-only fashion. No external contributions, no license, etc. I see no reason not to do this, especially for such a security-oriented service. You should be striving for as much transparency as possible.

dylan604 4y ago
Because they like being in business vs just giving away their software? Where is the repo of software that you've paid an unknown number of developers to work on for multiple years over multiple versions that you charge for and run a viable business employing all of the peoples?
- deleted 4y ago
  [deleted]
- counttheforks 4y ago
  You should perhaps read up on software licenses and what it means when code is public but unlicensed.
- deleted 4y ago
  [deleted]
- ilyt 4y ago
  Just because source code is available doesn't mean you can legally use it. That's why every "the company source code got stolen!" news is nothingburger, no competitor can use it, it would be huge liability to be caught using it, and it "only" matters for people that might find bugs in it.
aidos 4y ago
They are in the business of doing business. How much of the codebase that makes up their business model would you like them to expose?
- nequo 4y ago
  Bitwarden is in the business of doing business, too. But their source code is publicly available. A lot of it is even under GPL: https://github.com/bitwarden/server/blob/master/LICENSE_FAQ.md https://github.com/bitwarden/server/blob/master/LICENSE_FAQ....
  - roustem 4y ago
    Fun fact: Bitwarden also includes some of the 1Password open-source code: https://github.com/bitwarden/clients/blob/c10e93c0d9cf306a592fbf6d8b1619e9a14cdc05/apps/browser/src/content/autofill.js https://github.com/bitwarden/clients/blob/c10e93c0d9cf306a59...
enraged_camel 4y ago
I mean, even if their code was publicly available, how could you verify that they are running that code, and not some other code?
- counttheforks 4y ago
  Compile it yourself & run the binary?
  - shagie 4y ago
    If you could do that, what value would the business have?
    - TylerE 4y ago
      Hosted infrastructure? Support? Publishing signed binaries onto app stores?
    - counttheforks 4y ago
      Licensing

dylan604 4y ago

Because they like being in business vs just giving away their software? Where is the repo of software that you've paid an unknown number of developers to work on for multiple years over multiple versions that you charge for and run a viable business employing all of the peoples?

deleted 4y ago
[deleted]
counttheforks 4y ago
You should perhaps read up on software licenses and what it means when code is public but unlicensed.
deleted 4y ago
[deleted]
ilyt 4y ago
Just because source code is available doesn't mean you can legally use it. That's why every "the company source code got stolen!" news is nothingburger, no competitor can use it, it would be huge liability to be caught using it, and it "only" matters for people that might find bugs in it.

aidos 4y ago

They are in the business of doing business. How much of the codebase that makes up their business model would you like them to expose?

nequo 4y ago
Bitwarden is in the business of doing business, too. But their source code is publicly available. A lot of it is even under GPL: https://github.com/bitwarden/server/blob/master/LICENSE_FAQ.md https://github.com/bitwarden/server/blob/master/LICENSE_FAQ....
- roustem 4y ago
  Fun fact: Bitwarden also includes some of the 1Password open-source code: https://github.com/bitwarden/clients/blob/c10e93c0d9cf306a592fbf6d8b1619e9a14cdc05/apps/browser/src/content/autofill.js https://github.com/bitwarden/clients/blob/c10e93c0d9cf306a59...

enraged_camel 4y ago

I mean, even if their code was publicly available, how could you verify that they are running that code, and not some other code?

counttheforks 4y ago
Compile it yourself & run the binary?
- shagie 4y ago
  If you could do that, what value would the business have?
  - TylerE 4y ago
    Hosted infrastructure? Support? Publishing signed binaries onto app stores?
  - counttheforks 4y ago
    Licensing