41–43 of 43 posts
The lack of positive, constructive feedback in this HN comments thread worries me. Come on people!
This is just a hosted seafile installation from an out-dated fork. Negative feedback is what this should get by all means, if only for being dishonest and evasive about the software used.
"All of our code is open source and can be reviewed by anyone. This guarantees maximum security." Can be reviewed doesn't mean has been reviewed. Nor does it imply any quality of review, or the quality of the reviewers itself. And the knife cuts on two sides, though only one side is mentioned, the one side that should attract users. Not the side, that every evil minded person can look through the source code, abuse i…
> that every evil minded person can look through the source code, abuse it, before we were able to counter/fix etc it. I think this is a worthy application of the phrase It's a feature, not a bug. Closed source necessitates that the software hasn't been reviewed by independent programmers, only the authors. Open source, while it doesn't necessitate that the software has been reviewed, it at least provides the potenti…
The fact that something is possible to review, doesn't imply it will actually happen. See recent example issues of software like OpenSSL, Bash etc.
Though personally i don't see any motivation that would make me believe the open or closed choice is the better. They both have risks and costs, which you need to weight and make your choice upon. And most important accept the risks of your choice (, which you can of course try to minimise and should).
Itypo do cheer for any software you can choose to run/host yourself on your own network/hardware. And not be relying on another party to run and/or host it for you. (Which brings the additional security issues you can't control, physical access etc).
I love Seafile, and am running it on my own VPS right now as my primary file sync/store. I'd love for more companies to pop up offering hosted Seafile instances. Right now I'm hosting my own because I like having the guarantee that it won't get pulled out from under me or change the TOS in an unexpected way, but I don't like being my own sysadmin when things go wrong (not that things go wrong frequently -- the softwa…