5
(269)
Posts: 73
Earned: 0 XMR
Tipped: 0 XMR
What is current progress and eta for this?
Edited: Sep 26 12:57
N/A
(0)
Posts: 9
Earned: 0 XMR
Tipped: 0 XMR
Opening sourcing this or any other website which has the main function of transacting sales is a bad idea. Who would this benefit ? I see someone said it would add contributions, I wouldn't want this if it was my site. I also wouldn't want others to duplicate it or have the ability for people to create a test site for hacks, spoofing or whatever else. My only beef with the site has been the users, it's obvious there are a good number of idiots and scammers. I would focus on strengthening the brand and not expanding or opening it.
5
(4)
Posts: 125
Earned: 0.003 XMR
Tipped: 0 XMR
Closed source doesn't stop attackers here. The entire client already ships to every browser, you can read the messenger and escrow JavaScript with View Source. Anyone building a spoof or hunting a client-side exploit does exactly that, no repo needed. What the repo would add is the reverse: people who find a flaw and report it instead of quietly using it. The tools this community already trusts, from the Monero wallets to Haveno and Bisq, are open for that reason.
Edited: Sep 26 20:06
5
(43)
Posts: 19
Earned: 0 XMR
Tipped: 0.397 XMR
In general I support Free Open Source Software, in this case however I align with the opinion above made by CANADA and maybe one or two others before. Happy that my XMR donations went to support Anarkio, Doug, and the core team. Keep up the good work!
N/A
(0)
Posts: 9
Earned: 0 XMR
Tipped: 0 XMR
Those are wallets and exchanges and have no comparison to a web site. Web sites aren't usually open sourced and whatever ships to the browser is only partial. I'm sure there is more than js and css to the site. There has to be a database and some code. I see all downside and no upside for the site or its owner. Even all hacks aside why give someone the chance to duplicate or look into the inner workings for any reason.
5
(269)
Posts: 73
Earned: 0 XMR
Tipped: 0 XMR
For me it is strange that we even discuss if it should be open source or no. Open sourcing is and should be standard in privacy community. It is done for maximum transparency with users to show that software is doing what it is intended to do.
Some of you argue that it allows bad actors to dig for vulnerabilities more easily, but it works in two ways, because those acting in good faith can find vulnerability and fix it. Hackers don't need project to be open source to find holes, so it doesn't stop their research anyway.
Other your argument is that someone could take the code and start competing website. Yes it is possible, but this project won't be successful. It would be boycotted when community see it is stolen. XMR Bazaar is already established in community so something like that can't be hidden. It is also not that easy. If some of you believe it is that easy to take open source project and start competing with them, then why don't you take for example Proton mail code and start your own email service? They have millions of users, so steal them just 1M users and you will be rich.
My suspicion is that XMR Bazaar is not open source, because they are ashamed of their code. But if that is the case it is not end of the world. In my opinion project is successful, but could be 2x better. I would prefer to hear from Admin something like "Ok, my project is sloppy, but I wanted to do it cheap and fast, so I hired inexperienced dev and wanted him to move fast compromising quality. Nevertheless we succeeded, we got active users and project is famous in community."
I understand that hiring dev is expensive af and profit from such website is not huge. I think good solution for XMR Bazaar is to develop XMR Bazaar v2 on the solid ground, fixing all issues of v1 and pushing for perfection on v2. I think Admin should make friend with some good dev that would be interested to develop v2 and share income with him 50/50. That would be good symbiosis- Admin bring to the table established project and dev work to develop even better v2.
5
(4)
Posts: 125
Earned: 0.003 XMR
Tipped: 0 XMR
"I wouldn't want this if it was my site." "I see all downside and no upside." "Why give someone the chance to look into the inner workings." These are preferences with nothing under them: no fact, no mechanism, no worked-through consequence. Infrastructure holding other people's money and messages has to be argued from something.
"Websites aren't usually open sourced" is an appeal to what is common, not to what is true, and it falls apart once you name the actual peer group. Bisq, Haveno, the Monero wallets, SimpleX: the privacy tools built for money and private messages are open. Here, closed is the outlier.
This site's pitch is that the server never sees your keys or messages. CANADA conceded there is server code and a database no one can inspect, then argued it should stay that way. That is backwards. The unverifiable server is part of what the privacy claim rests on. How is a user meant to verify a guarantee they are not allowed to inspect? No one has answered.
An opinion about security is worth what its reasoning is worth, and so far there isn't much. A stack of preferences isn't an argument, and a counterargument needs an argument to counter. I'm happy to debate this either way, but there's nothing here to debate yet. Kerckhoffs's principle, the foundation of modern cryptography since 1883, holds that a system must stay secure even when everything about it except the key is public. Security that depends on keeping the design secret was ruled out before any of us were born. If you want to hold the closed source line, bring something to hold it with. Until then it's hard to take seriously.
N/A
(0)
Posts: 9
Earned: 0 XMR
Tipped: 0 XMR
There is a pool of thousands of people who are in this business and would be glad to take it. devs, sellers, hobbyists. hackers and those are the nice guys. Every bitcoin related site or feature or service has been copied many times over and protonmail is no comparison to here. Completely different service and business model. If you think a project would fail because of the loyal xmr community you are dreaming. people want to sell their stuff or buy something at a good price, that is the main criteria and if you can make that happen it will be a success. Nobody cares about the xmr community and who was first and that holds zero weight in p2p sales.
Tip Monero to nobswebdev 
8C3UDYTrTQ34bqLVA3QhRacELDBDEGCixSKd1rqJeWoKjS4m1qHbcNphJNEzs67phXSwD5RbVj5bpTm7HtZjYjVHUiMZ4rk
Publish Tip to nobswebdev 
8AJJt5FoxgKapYk69YgSLXPaSBYd88hghg32ie25ZXGSFFYgVeKT4ytLkPoCsnJGE3gQninbK6JDUAX4qNCRUqfXFwXe3Hm
