4 ms·

But why would you put your IP on another company's servers? I guess if the value of your company was something other than your code then it would make sense.

hn_user2 11y ago
There is a ton of application code out there. Not super secret IP involving a secret new method to compress audio. It's mostly CRUD applications with some business logic mixed in. Nobody is trying to steal your CRUD code. Edit: just to clarify. I don't mean your crud code specifically. Just crud code in general. Maybe you specifically have some super amazing IP to guard.
- elwell 11y ago
  > super secret IP involving a secret new method to compress audio Pied Piper?
pbreit 11y ago
That ship sailed about a decode ago. And I know you probably think IP/code is a company's most valuable asset but for most companies that's not even close. A company's most valuable asset is how it goes about delighting customers.
- comrade1 11y ago
  So, no competition doing competitive analysis?
  - pbreit 11y ago
    I don't understand. If you're suggesting that IP/code sitting on GitHub servers is somehow at risk of being divulged then I will disagree.
    - comrade1 11y ago
      There have been multiple examples of github's poor security over the years. https://github.com/rails/rails/commit/b83965785db1eec019edf1fc272b1aa393e6dc57 https://github.com/rails/rails/commit/b83965785db1eec019edf1... and also poor security on the part of programmers where they submit ssh keys, for example, to publicly facing projects.
nemothekid 11y ago
>But why would you put your IP on another company's servers? Not sure I understand this. Isn't uploading your code to an AWS box "putting your IP on another company's servers"? Unless you host your own email, servers, chat, storage and backups, you are putting your IP on another company's servers.
- comrade1 11y ago
  Yes, it is trivial to run your own email, storage, backups, etc. In fact, you can't even use amazon for email since you can't set up a ptr with them. But if you do want to use Amazon securely I believe that they have the ability to encrypt your drive. That said, rack space is incredibly cheap these days, and throwing in a 1u ubuntu server in a 1/4 secure rack is cheaper than hosting a dedicated vps at amazon. I completly understand starting out using shared services as a startup, but eventually, and soon, you'll want to move to your own systems. It's just an expense for your business, and you would be irresponsible to leave your systems vulnerable. (my projects have been more sensitive in the past than the typical CRUD app, and so perhaps I'm paranoid)
  - nemothekid 11y ago
    Except I would rather trust a service like tarsnap to host my backups securely, or amazon with kernel updates than doing it myself. Hosting my own backup server is "trivial" only if I have the expertise to encrypt it properly, and keep the box updated and safe from vulnerabilities. Moving to our systems only makes sense to me if its a core part of my business or if 3rd party solutions are inadequate. Paying 2 engineers $75/hr to reinvent IRC/git/email poorly is a poor use of time and money. At the end of the day, if GitHub steals my IP (for whatever reason) I can sue GitHub (if its not morally wrong, they have a legal reason to discourage them from doing so). If my "1u ubuntu server" is hacked due to a poor default, I have no recourse.
s73v3r 11y ago
Because they handle the hosting, redundancy, backup, etc.
arfliw 11y ago
So first you wanted to know if they had revenue. You got our answer and now you want to know why so many people are paying them money. You know the answers to all of these things. Just come out and say what you think about Github and their business model instead of wasting our time answering these supposed questions.

hn_user2 11y ago

There is a ton of application code out there. Not super secret IP involving a secret new method to compress audio. It's mostly CRUD applications with some business logic mixed in. Nobody is trying to steal your CRUD code. Edit: just to clarify. I don't mean your crud code specifically. Just crud code in general. Maybe you specifically have some super amazing IP to guard.

elwell 11y ago
> super secret IP involving a secret new method to compress audio Pied Piper?

pbreit 11y ago

That ship sailed about a decode ago. And I know you probably think IP/code is a company's most valuable asset but for most companies that's not even close. A company's most valuable asset is how it goes about delighting customers.

comrade1 11y ago
So, no competition doing competitive analysis?
- pbreit 11y ago
  I don't understand. If you're suggesting that IP/code sitting on GitHub servers is somehow at risk of being divulged then I will disagree.
  - comrade1 11y ago
    There have been multiple examples of github's poor security over the years. https://github.com/rails/rails/commit/b83965785db1eec019edf1fc272b1aa393e6dc57 https://github.com/rails/rails/commit/b83965785db1eec019edf1... and also poor security on the part of programmers where they submit ssh keys, for example, to publicly facing projects.

nemothekid 11y ago

>But why would you put your IP on another company's servers? Not sure I understand this. Isn't uploading your code to an AWS box "putting your IP on another company's servers"? Unless you host your own email, servers, chat, storage and backups, you are putting your IP on another company's servers.

comrade1 11y ago
Yes, it is trivial to run your own email, storage, backups, etc. In fact, you can't even use amazon for email since you can't set up a ptr with them. But if you do want to use Amazon securely I believe that they have the ability to encrypt your drive. That said, rack space is incredibly cheap these days, and throwing in a 1u ubuntu server in a 1/4 secure rack is cheaper than hosting a dedicated vps at amazon. I completly understand starting out using shared services as a startup, but eventually, and soon, you'll want to move to your own systems. It's just an expense for your business, and you would be irresponsible to leave your systems vulnerable. (my projects have been more sensitive in the past than the typical CRUD app, and so perhaps I'm paranoid)
- nemothekid 11y ago
  Except I would rather trust a service like tarsnap to host my backups securely, or amazon with kernel updates than doing it myself. Hosting my own backup server is "trivial" only if I have the expertise to encrypt it properly, and keep the box updated and safe from vulnerabilities. Moving to our systems only makes sense to me if its a core part of my business or if 3rd party solutions are inadequate. Paying 2 engineers $75/hr to reinvent IRC/git/email poorly is a poor use of time and money. At the end of the day, if GitHub steals my IP (for whatever reason) I can sue GitHub (if its not morally wrong, they have a legal reason to discourage them from doing so). If my "1u ubuntu server" is hacked due to a poor default, I have no recourse.

s73v3r 11y ago

Because they handle the hosting, redundancy, backup, etc.

arfliw 11y ago

So first you wanted to know if they had revenue. You got our answer and now you want to know why so many people are paying them money. You know the answers to all of these things. Just come out and say what you think about Github and their business model instead of wasting our time answering these supposed questions.