Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GitHub is now free for teams

github.blog

Post reply on HN
Print view View original

191–200 of 664 posts

Re: GitHub is now free for teams

#191

Post by tptacek »

thramp wrote: post #35
natfriedman wrote: post #26

Hi HN, I'm the CEO of GitHub. Everyone at GitHub is really excited about this announcement, and I'm happy to answer any questions. We've wanted to make this change for the last 18 months, but needed our Enterprise business to be big enough to enable the free use of GitHub by the rest of the world. I'm happy to say that it's grown dramatically in the last year, and so we're able to make GitHub free for teams that don'…

This is a great change! One request: I wish that SAML was not an enterprise feature. SAML ought be a basic security feature like 2FA—it's especially valuable for open source teams who might use a mixture of services, and an easily accessible and cheap SSO solution would go a long way in raising the security bar for all teams, not just open source teams.

Since they just said they were waiting for Enterprise revenue to reach a level where they could free the core product, and since SAML is an important driver of Enterprise upgrades (I've seen it happen), I wouldn't hold your breath.

Now that the core Pro features are free, I wonder if Rob will update sso.tax to set Github to :inf:.

Re: GitHub is now free for teams

#193

Post by Saaster »

derefr wrote: post #133
Saaster wrote: post #88

Earlier quoted context omitted.

SAML (and 2FA to a lesser extent) comes with some serious support burdens on the companies offering it. There's a long tail of more or less broken SAML implementations on both the service and identity provider sides, provisioning issues, configuration issues, "Sally can't login on Tuesdays" issues, duplicated slightly-inconsistent data in IdP and Service side records issues... If you as a SaaS provider outsource your…

Sounds like SAML needs the same "everyone gets together to make a FOSS implementation that knows about the weird quirks of all the implementations it interacts with" approach that e.g. the Samba project was founded upon.

I agree. There's a million SAML for Java/Python/Node.js/Foo libraries out there, all with a long list of issues and known cases that don't work correctly, security issues etc. but it's the wrong model in my opinion.

Instead of directly bolting SAML into your app, I think a FOSS implementation of an independently running service is the way to go. You run the battle tested open source service (locally / in your cloud), it accepts the SAML assertions and mints something sane like JWTs which can easily be consumed by the service providers, isolating the entire thing from your core app and allowing it be used with any stack. E.g. essentially an open source locally deployed Okta. Doesn't even need to do any user management, just focus on rock solid interoperability and forward all decision making to the actual app server.

Re: GitHub is now free for teams

#194

Post by ChrisMarshallNY »

Thanks. I'm not surprised by this. I know this isn't a "mainstream" opinion, but I was fairly happy when MS brought GitHub. I think that the Nadella MS is much more streamlined than the old "Enemy of the State" version that got our undies in a bunch, back in the last century.

Re: GitHub is now free for teams

#195

Post by tptacek »

tobinfricke wrote: post #92
thramp wrote: post #35

Earlier quoted context omitted.

This is a great change! One request: I wish that SAML was not an enterprise feature. SAML ought be a basic security feature like 2FA—it's especially valuable for open source teams who might use a mixture of services, and an easily accessible and cheap SSO solution would go a long way in raising the security bar for all teams, not just open source teams.

I'd never heard of SAML before. Is it like a more complicated version of OAuth?

SAML is the de facto standard single sign-on protocol for enterprise-grade applications. If a SAAS app integrates directly with Okta or OneLogin, it probably does so with SAML.

There's a lot of functional overlap between SAML and OIDC/OAuth, but SAML is a very different (and idiosyncratic) protocol; the "what" is the same, but the "how" is very different.

Re: GitHub is now free for teams

#196

Post by tptacek »

hirako2000 wrote: post #86
vptr wrote: post #66

Earlier quoted context omitted.

Agree. I sell simple sass product myself and offer SAML to everyone. I view security as a basic right, not something to be used to extract more money for. Charging for additional features is ok, charging for keeping your account more secure is just plain wrong.

But saml is for integration (SSO). Github provides 2fa for free. What enterprise is paying is the convenience, not security itself.

SSO is a security feature, not a convenience. It happens to be a security feature that comes bundled with some extra convenience, but it's not the only one like that; so are password managers.

Re: GitHub is now free for teams

#197

Post by sytse »

Someone1234 wrote: post #129

I think GitHub are doing well, but one cannot deny that GitLab has carved out a fantastic niche (on-prem, private instances, OSS, etc) that GitHub doesn't compete in. So while I agree GitHub are "the" company to beat, I think GitLab is doing a good job of contrasting. PS - No affiliation with anyone.

Thanks for the kind words!

For developers everywhere competition is great. We recently made 18 new features free and open source https://about.gitlab.com/blog/2020/03/30/new-features-to-cor... and today Github with an improved free plan and their team plan came down to the exact same price as our most affordable plan. BTW Maybe an idea to rename their lowest tier from team, may we suggest bronze? :)

Since you mentioned contrasting here is a quick take on the features that you lose if you go from a GitHub Pro account to a Free account, I got the list from https://news.ycombinator.com/item?id=22867974 :

    Protected branches in private repos => Free on GItLab
    Draft PRs in private repos => Free on GItLab
    GitHub Pages in private repos (using 1) => => Free on GItLab
    Wikis in private repos => Free on GItLab
    Code owners in private repos => Bronze on GItLab
    Multiple issue assignees in private repos => Bronze on GItLab
    Multiple PR assignees in private repos => Bronze on GItLab
    Code review automatic assignment in private repos => ?
    Scheduled reminders in private repos => TODOs are free on GitLab
    Standard support => Bronze on GitLab
For a complete comparison across all the stages (like monitor and defend) please see https://about.gitlab.com/devops-tools/github-vs-gitlab.html

Re: GitHub is now free for teams

#200

Post by fingerprinter »

irrational wrote: post #127
cjdu wrote: post #112

Earlier quoted context omitted.

Agreed. I cannot believe that GCP and AWS are so asleep at the wheel either. If I were them I would literally be throwing money at some of the GitHub folks to have them fix AWS or GCP. And it was should have been rather obvious when GitHub released the beta of Actions a few years ago. Actions remains the most important thing GitHub has done, ever, in my opinion. It might take a few more years for people to fully real…

What is Actions?

Workflow automation w/ built in CI/CD, package management and code scanning etc.

The most important bit is workflow automation. It can be triggered on most (all?) events github emits

https://help.github.com/en/actions/reference/events-that-tri...

It was super obvious the value prop when it was HCL based. YAML based it kind of looks more like 'another CI'. It's still insanely powerful, just not as developer friendly anymore.

Post reply on HN