quoth Jeremy Rudd as of Thu, 23 Feb 2012 07:56:43 -0800:

> *What:* Can NodeJS apps be distributed as binary? ie. you compile the
> .js app via V8 into its native binary, and distribute the binary to our
> clients? ... or is minifying the code all you can do?
> 
> *Why:* We build serverside applications in NodeJS for clients, that have
> often to be hosted on the client's servers. Distributing source code
> means clients can easily steal our solution and stop paying licensing
> fees. This opens up the possibility of easy reverse-engineering or reuse
> of our apps without our awareness.
> 
> *Shamelessly cross posted on*:
> http://stackoverflow.com/questions/9413123/secure-distribution-of-
nodejs-applications


Ok, I tried my best to keep my peace, but I can't resist posting this.

This is a terrible, terrible misguided idea. And please don't co-opt the 
word “secure” for it. This has nothing to do with security for either 
party; on the contrary, it's more about dealing with your insecurities.

Distribute your product with source. If your clients have enough 
technical ability to “steal” it, they also have enough to help you fix 
bugs.

And then make it a big deal in your promotion material that it comes with 
sources.

If somebody “steals” your work, sue them. Contract law is more than 
sufficient for that, and if your clients are determined to “steal” your 
work, binaries won't stop them.

If the problem is more about especially clever things you do to solve 
their problem -- again, contracts will protect you much better than 
binaries or obscured code, but you also have the option of patents. (Odds 
are, though, the thing you're trying to protect isn't 10% as valuable as 
you think it is.)


best,
                                               Lalo Martins

-- 
Job Board: http://jobs.nodejs.org/
Posting guidelines: 
https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
You received this message because you are subscribed to the Google
Groups "nodejs" group.
To post to this group, send email to nodejs@googlegroups.com
To unsubscribe from this group, send email to
nodejs+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/nodejs?hl=en?hl=en

Reply via email to