Re:How to take over the computer of a Maven Central user
by tdicola on Tuesday July 29, 2014 @12:09AM
(#8100623)
Good luck getting your users to come back and trust you after a major security incident that compromises their systems. I would turn it around and think of it this way, is it worth giving up some profit to help ensure you don't have embarrassing and damaging security issues? It's like insurance, you pay the premium and hope you never need it.
[ Parent
| on HN ]
Re:How to take over the computer of a Maven Central user
by danielweber on Tuesday July 29, 2014 @10:06AM
(#8102278)
If they aren't paying you, they aren't your users.
This reinforces my priors that there is very little "free-as-in-beer" software.
Re:How to take over the computer of a Maven Central user
by technomancy on Tuesday July 29, 2014 @11:40AM
(#8102818)
The software that runs the repository is nearly irrelevant for the purpose of this discussion. The question is solely about services, which are a lot more difficult to fund at scale.