Karak Terrel
As Far As The eYe can see
Chained Reactions
   |
Posted - 2011.05.02 20:49:00 -
[1]
 Quote:
Now some have worried that by choosing an Open Source solution we have to reveal the source code thus making your accounts and activities in EVE Gate vulnerable. This is not the case here as we have purchased a commercial license to YAF so we can properly protect our efforts.
Well, this is "Security through obscurity" and this approach is known to have flaws. If you think your security breaks down if you show the code to the public how can you run that software and still sleep at night? I know i could not.
Originally by: CCP Karuck
There are performance optimizations and features like the new search that the YAF community could have benefited from, but the decision was made to take the ".
Now you realize that you fix yourself to THIS version of YAF if you branch the entire codebase? In the opensource world this is considered a bad thing, it is like not writing tests, a quality issue! why? If you take the "long" approach and commit basic changes upstream you are in the luxury position that in a year or two when YAF has evolved and you want to upgrade to a new version, your changes are already in there. Together with changes from other companies, improvements you don't have to pay for. The migration will be (almost) seamless. Now you have probably closed that easy path and as i have seen it many times i can promise you that the "quicker approach" will cost you more effort in the end.
And there is no way around upgrading! There are bugs in YAF, bugs that will be discovered in the opensource project and fixed there. Your codebase will however be vulnerable to this bugs unless you backport the fixes into your branch. As the branches diverge it will be harder for you to backport the fixes and sooner or later you have to upgrade to get closer to the main branch again to minimize the effort.
Now you may ignore me because i'm obviously just mad. But just in case i point back to this post in some years: I told you so!
tl;dr your forums are doomed, your handling of opensource is flawed
--
please consider to visit our w-space system, cake will be served immediately. |