5 ms·
How long will it take for the private repos to be hacked? Would you put the company revenue generating jewels in there?
by jksmith 14y ago
How long will it take for the private repos to be hacked? Would you put the company revenue generating jewels in there?
- kybernetikos 14y agoDo you think it's more or less likely to get hacked than private repositories on github (which are already trusted by many companies)? Before you answer, consider http://www.extremetech.com/computing/120981-github-hacked-millions-of-projects-at-risk-of-being-modified-or-deleted http://www.extremetech.com/computing/120981-github-hacked-mi...
- bitcartel 14y agoThe crown jewels should always be kept under lock and key! A couple of years ago I was at one of the Github drink meetups. I asked if they were working on encrypted private repos (this was just before or around the time Github Firewall was introduced). A Github employee told me no… before adding that in his opinion source code was not valuable. I asked him to clarify and he said imagine if Twitter had their source code leaked. It wouldn't be a big issue as Twitters success was built more on business execution rather than code. A valid point perhaps but small indie developers could easily be put out of business if the source code to their unique selling point or competitive advantage were to be made public. I'm sure Github (and others) take security seriously, but given the above, caveat emptor!
- trentmb 14y agoTwitter is a service.
- facorreia 14y agoDid you ask him for Github's source code?
- ConstantineXVI 14y agoHosted repos can only be so secure. If you need absolute trust, host them on your own machines (for which GitHub and Atlassian will happily sell you tools to make doing so easier).
- kybernetikos 14y agoI think there's a lot of truth in this attitude, I sometimes think 'if someone can take our code without all our knowledge and do something useful with it better than we can, then they deserve to win', having said that, I also strongly suggest that it would be bad for GitHubs business for it to be widely known that they have this attitude...
- jksmith 14y agoActually, that's why I brought it up. Unless the cost analysis justifies the risk, I wouldn't host a repo on bitbucket or github.
- Jase 14y agoFor what it's worth, all of Atlassian's company revenue generating jewels are hosted on Bitbucket, so security is fairly important to us. :)
- konstruktor 14y agoYou're giving out your product's source code to customers anyway. How is hosting slightly newer versions of it on your own servers a big thing?