Hacker News Reader

Comment by ramshorns | Hacker News Reader

This appears to not actually be open source or free software. The MEGA Limited Code Review License [0] gives some permissions but stops short of allowing use for any purpose, modification, sharing, and redistribution of modified versions.

[0] https://github.com/meganz/MEGAsync/blob/master/LICENCE.md

View on HN

Which appears to be a violation of GitHub's terms of service, which explicitly require the ability to fork projects:

"By setting your repositories to be viewed publicly, you agree to allow others to view and fork your repositories."

https://help.github.com/articles/github-terms-of-service/

Independent development (forking) doesn't imply that you can redistribute those versions to arbitrary parties.

At least someone can review the code, but is this enough to trust them? I am talking about the people who really worries about their files on cloud storage services.

It is not enough as this does not assert they are executing this code and not a modified version.

How would one go about asserting that?

Lately I've spent some time contemplating how to establish trust in cloud services, this particular nut I haven't been able to crack yet.

Interesting problem, right? Not an expert in the area, but blockchain implementers say they solve this issue. Afaik then there isn't one trusted party, but anyone can compile and run the code and be a provider (and be paid), and a single untrustworthy party won't bother because his chances of compromising the user's data is small.

Whatever they release, there is no way to prove that that is the code that is actually running on their servers.

is open source the point here?

Reply on news.ycombinator.com