Comments (6)
Thanks @bhdresh for adding a license.
I also agree with @anantshri that the lack of code in the repository is a serious red flag. It will prevent contributions and does not fall in line with the expectancy people have when something is claimed to be open source (like in README.md).
I think the discussion raised by Anant is fair and might be worth to be considered within your project team. A security solution should not be relying on secrecy. For the success of the project, it may also help if the code is available. This way people can learn about it, contribute, fork, etc.
from dejavu.
Thanks for reviewing the tool. We have added the licence information.
Please let us know if any other information is required.
from dejavu.
@mboelen i would argue that the code itself is not opensource. I had a quick chat with author's during arsenal and they claimed its available you can do whatever you want fork or update but the github repository is empty with no code at all.
the claim is that
- since there are multiple setup steps required hence ova is only format which we will distribute.
- we don't want to take an any contributions and we will maintain code on our own hence no point pushing it out. This was in response when i suggested if they open code to public they can get contributions.
- the other claim is opening the code will defeat the purpose of deception as everyone will know about how code works.
putting this out here coz this seems to be the only place where discussion might take place
Note: I am yet to evaluate the actual file its 1.79GB zip with 5.56GB VDI inside.
from dejavu.
@anantshri, thank you for your comments, would like clarify few points,
Open source does not mean having code in a specific format or package, as long as the code is public it is considered open source. In case of Dejavu source code is available within image itself.
We have got many great feedback/suggestions during Blackhat and Defcon and would implement those in coming days, one of them was to come up with documentation to provide better understanding of the code structure and check feasibility to release code as package.
Secondly, we will also open a Trello/Slack channel for collaboration, until that time please feel free to reach us on [email protected] or [email protected] if you have any suggestions/feedback/update.
It seems there is some misunderstanding about point 3, we don't see opening code as a risk to deception capabilities + code is already available on the disk anyway.
Having said that, we see this as a journey to make Dejavu a comprehensive open source deception platform and committed to make necessary changes as we go.
Hope this has helped, kindly feel free to reach us if you have any further query or suggestions.
Thanks a lot.
Regards,
-Bhadresh
from dejavu.
@mboelen, thank you for your comments, absolutely agree with what you are highlighting, in coming days, we will be working on documentation to provide better understanding of the code structure and check feasibility to release code as package.
Also, would like to emphasis that project is open source and we don't see opening source code as a risk to Dejavu's deception capabilities.
from dejavu.
Thanks for clarifying @bhdresh - Issue can be closed for me.
from dejavu.
Related Issues (20)
- Any chance for Hyper-V? HOT 4
- VMware esxi question HOT 1
- smtp gmail not working? HOT 5
- How to shedule esxi older snapshot remove HOT 1
- Password reset of console dashboard HOT 1
- vmware - 7.03 installation HOT 4
- How run mailAlert.php engine file? HOT 3
- When is authenticated smtp to be reimplemented ? HOT 3
- Project alive? HOT 1
- Impossible to ping the decoy HOT 4
- camolabs.io is down HOT 2
- v15 upgrade file missing
- Attack raw logs for siem HOT 1
- Change IP during installation HOT 1
- Unable to download Engine VDI file
- Register doesn't work HOT 1
- Decoy Group can only contain alpha numeric charcters HOT 1
- Attack Graph not visible HOT 1
- How can I change the decoys container configuration? HOT 1
- I can't register new user to get started thraugth web console HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from dejavu.