Nobody likes to be the guy who coded the “simple” website that later compromised a whole server and was used to leech ten-thousands of dollars out of unsuspecting citizens, and thus dragged an innocent company in trouble. Or the explaining that inevitably follows. Having security audited a few custom websites lately, I got the feeling that there is a need for a resource that in a few simple lessons helps web developers make more secure sites and avoid trouble.
Is it OK to take program code under a given license, add our own functionality, and then… (1) sell/license it as a product? (2) provide it as software-as-a-service?
Lately I was thinking about quantities of code.
More specifically, how the codebase of a typical web application relates to the open-source code used in it?
For an example, let’s use a mutual-fund search web application we developed for a brokerage about a year ago. (Disclaimer about the design: they wanted feng-shui compatible, ok? We deliver.) It’s [...]