7 ms·

> Thought exercise: what would seriously happen if you did let some of your proprietary code outside your network Lawsuits? Lawful terminations? Financial dama

by aulin 2y ago

> Thought exercise: what would seriously happen if you did let some of your proprietary code outside your network Lawsuits? Lawful terminations? Financial damages?

mbesto 2y ago
Huh? No, i'm saying, what potential damage does an organization have? Not the individual who may leak data outside your network.
- aulin 2y ago
  Those are risks both for the individual and for the company when there are contracts in place with third parties involving code sharing. Other risks include leaking industrial secrets that may significantly damage company business or benefit competitors.
  - klibertp 2y ago
    Please acknowledge that your situation is pretty unique. Just take a look at the comments: how many people say, or outright presume, that their company's code is already on GitHub? I'd wager that your org doesn't keep code at a 3rd party provider, right? Then, you're in a minority. I don't mean to dismiss your concerns - in your situation, they are probably warranted - I just wanted to say that they are unique and not necessarily shared by people who don't share your circumstances.
    - aulin 2y ago
      This subthread started with someone from a no AI policy company, people are dismissing it with snarky comments, along the line of your code is not as important as you believe. I'm just trying to show a different picture, we work in a pretty vast field and people commenting here don't necessarily represent a valid sample.
      - klibertp 2y ago
        > people are dismissing it with snarky comments, along the line of your code is not as important as you believe. That says more about those people than about your/OP's code :) Personally, I had a few collisions with regulation and compliance over the years, so I can appreciate the completely different mindset you need when working with them. On the other hand, at my current position, not only do we have everything on Github, but there were also instances where I was tasked with mirroring everything to bitbucket! (For code escrow... i.e., if we go out of business, our customer will get access to the mirrored code.) > people commenting here don't necessarily represent a valid sample. Right. I should have said that you're in the minority here. I'm not sure what's the ratio of dumb CRUD apps to "serious business" kind of development in the wild. I know there are whole programming subfields where your kinds of concerns are typical. They might just be underrepresented here.
        aulin 2y ago
        Yes I've had plenty of experiences with orgs that self host everything, I don't think it's a minority it's just a different cluster than the one most represented here. Still I believe hosting is somewhat different, if anything because it's something established, known players, trusted practices. AI is new, contracts are still getting refined, players are still making their name, companies are moving fast and I doubt data protection is their priority. I may be wrong but I think it's reasonable for IT departments to be at least prudent towards these frameworks. Search is ok, chat is okish, crawling whole projects for autocompletion I'd be more careful.
        mbesto 2y ago
        > Yes I've had plenty of experiences with orgs that self host everything, I don't think it's a minority it's just a different cluster than the one most represented here. I've done 800+ tech diligence projects and have first hand knowledge of every single one's use of VCS. At least 95% of the codebases are stored on a cloud hosted VCS. It's absolutely a minority to host your own VCS.
        mbesto 2y ago

by aulin 2y ago

> Thought exercise: what would seriously happen if you did let some of your proprietary code outside your network Lawsuits? Lawful terminations? Financial damages?

mbesto 2y ago

Huh? No, i'm saying, what potential damage does an organization have? Not the individual who may leak data outside your network.

aulin 2y ago
Those are risks both for the individual and for the company when there are contracts in place with third parties involving code sharing. Other risks include leaking industrial secrets that may significantly damage company business or benefit competitors.
- klibertp 2y ago
  Please acknowledge that your situation is pretty unique. Just take a look at the comments: how many people say, or outright presume, that their company's code is already on GitHub? I'd wager that your org doesn't keep code at a 3rd party provider, right? Then, you're in a minority. I don't mean to dismiss your concerns - in your situation, they are probably warranted - I just wanted to say that they are unique and not necessarily shared by people who don't share your circumstances.
  - aulin 2y ago
    This subthread started with someone from a no AI policy company, people are dismissing it with snarky comments, along the line of your code is not as important as you believe. I'm just trying to show a different picture, we work in a pretty vast field and people commenting here don't necessarily represent a valid sample.
    - klibertp 2y ago
      > people are dismissing it with snarky comments, along the line of your code is not as important as you believe. That says more about those people than about your/OP's code :) Personally, I had a few collisions with regulation and compliance over the years, so I can appreciate the completely different mindset you need when working with them. On the other hand, at my current position, not only do we have everything on Github, but there were also instances where I was tasked with mirroring everything to bitbucket! (For code escrow... i.e., if we go out of business, our customer will get access to the mirrored code.) > people commenting here don't necessarily represent a valid sample. Right. I should have said that you're in the minority here. I'm not sure what's the ratio of dumb CRUD apps to "serious business" kind of development in the wild. I know there are whole programming subfields where your kinds of concerns are typical. They might just be underrepresented here.
      - aulin 2y ago
        Yes I've had plenty of experiences with orgs that self host everything, I don't think it's a minority it's just a different cluster than the one most represented here. Still I believe hosting is somewhat different, if anything because it's something established, known players, trusted practices. AI is new, contracts are still getting refined, players are still making their name, companies are moving fast and I doubt data protection is their priority. I may be wrong but I think it's reasonable for IT departments to be at least prudent towards these frameworks. Search is ok, chat is okish, crawling whole projects for autocompletion I'd be more careful.
        mbesto 2y ago
        > Yes I've had plenty of experiences with orgs that self host everything, I don't think it's a minority it's just a different cluster than the one most represented here. I've done 800+ tech diligence projects and have first hand knowledge of every single one's use of VCS. At least 95% of the codebases are stored on a cloud hosted VCS. It's absolutely a minority to host your own VCS.
        mbesto 2y ago