How to protect my code from getting stolen by employees?
-
About to hire my first programmer. Using Visual Studio 2913 with code checked into Visual Studio Online' which uses TFS (Team Foundation Services) I want to protect my code from being 'ripped off' :) How should I protect my code? (I hope I am posting this in the correct place) Thanks for any help :)
-
About to hire my first programmer. Using Visual Studio 2913 with code checked into Visual Studio Online' which uses TFS (Team Foundation Services) I want to protect my code from being 'ripped off' :) How should I protect my code? (I hope I am posting this in the correct place) Thanks for any help :)
Simple; you can't. Find people you can trust. Practical example; say I write a Memento-pattern for one of your applications, to provide Undo/Redo functionality. There's nothing stopping me from coding the same pattern in my own application. That is not a "ripp off", it is merely doing the same thing again, but in a different application. 'nother example; someone wrote a copy-protection scheme, and it needs maintenance. How could I perform maintenance, without seeing the code? Once it is seen, it can be reproduced.
Bastard Programmer from Hell :suss: If you can't read my code, try converting it here[^][](X-Clacks-Overhead: GNU Terry Pratchett)
-
About to hire my first programmer. Using Visual Studio 2913 with code checked into Visual Studio Online' which uses TFS (Team Foundation Services) I want to protect my code from being 'ripped off' :) How should I protect my code? (I hope I am posting this in the correct place) Thanks for any help :)
You cannot hide the source code from the programmer. At any cost, at any circumstances programmer would be able to re-write the code of your application, just even if he knows what your application is doing; if that is his intent. Since you're running the business and before hiring the programmer you should have full control over which person you are going to make a business relation with. You should first of all write your policy and other terms, that he must accept before he starts the job. In those terms you can indicate what-so-ever you want to abide him by. But still that doesn't give a 100% guarantee that programmer would always ensure the terms being applied on him. In these cases you are always allowed to use legal jurisdiction to fight for your right (if there are some).
The shit I complain about It's like there ain't a cloud in the sky and it's raining out - Eminem ~! Firewall !~
-
Simple; you can't. Find people you can trust. Practical example; say I write a Memento-pattern for one of your applications, to provide Undo/Redo functionality. There's nothing stopping me from coding the same pattern in my own application. That is not a "ripp off", it is merely doing the same thing again, but in a different application. 'nother example; someone wrote a copy-protection scheme, and it needs maintenance. How could I perform maintenance, without seeing the code? Once it is seen, it can be reproduced.
Bastard Programmer from Hell :suss: If you can't read my code, try converting it here[^][](X-Clacks-Overhead: GNU Terry Pratchett)
Thank you for your reply, I understand what you are saying. I am more worried about how to keep someone from stealing the entire application code for themselves. How do I protect myself from this?
-
Thank you for your reply, I understand what you are saying. I am more worried about how to keep someone from stealing the entire application code for themselves. How do I protect myself from this?
If you paid them for the work, then the ownership of the codebase is legally yours. You'd have copyright. You could break up your application into modules, and mak sure that some of the writers have no knowledge of the other modules - but that creates more risk (what if all people with knowledge of module A are sick?) than it actually adds. See, all the modules would come together in a setup-package. The person who goes to the client and installs the stuff might just as easily copy the entire product. Most shops that I know of don't even think about their employees as potential liabilities. I'd be looking for work elsewhere right away.
Bastard Programmer from Hell :suss: If you can't read my code, try converting it here[^][](X-Clacks-Overhead: GNU Terry Pratchett)
-
If you paid them for the work, then the ownership of the codebase is legally yours. You'd have copyright. You could break up your application into modules, and mak sure that some of the writers have no knowledge of the other modules - but that creates more risk (what if all people with knowledge of module A are sick?) than it actually adds. See, all the modules would come together in a setup-package. The person who goes to the client and installs the stuff might just as easily copy the entire product. Most shops that I know of don't even think about their employees as potential liabilities. I'd be looking for work elsewhere right away.
Bastard Programmer from Hell :suss: If you can't read my code, try converting it here[^][](X-Clacks-Overhead: GNU Terry Pratchett)
Actually, it depends on the terms of the employment contract and the jurisdiction. If the person is a contractor, then unless explicitly stated in the contract, they may retain copyright and IP ownership and you can only use the code for the purpose stated in the contract.
-
Actually, it depends on the terms of the employment contract and the jurisdiction. If the person is a contractor, then unless explicitly stated in the contract, they may retain copyright and IP ownership and you can only use the code for the purpose stated in the contract.
He was referring to employees, not contractors :) If you give someone else the assignment (someone who is not working for you), then you need additional agreements, regardless of whether it is a contractor or another company.
Bastard Programmer from Hell :suss: If you can't read my code, try converting it here[^][](X-Clacks-Overhead: GNU Terry Pratchett)
-
About to hire my first programmer. Using Visual Studio 2913 with code checked into Visual Studio Online' which uses TFS (Team Foundation Services) I want to protect my code from being 'ripped off' :) How should I protect my code? (I hope I am posting this in the correct place) Thanks for any help :)
You could always have the programmer sign a non-disclosure/non-compete agreement.
"I've seen more information on a frickin' sticky note!" - Dave Kreskowiak
-
About to hire my first programmer. Using Visual Studio 2913 with code checked into Visual Studio Online' which uses TFS (Team Foundation Services) I want to protect my code from being 'ripped off' :) How should I protect my code? (I hope I am posting this in the correct place) Thanks for any help :)
Two steps on top of my mind: 1. Keeping core algorithms and code to yourself, with others just getting a dll to link to. 2. Making sure that the licensing algorithm and code is with you alone. You alone should hold the license generator.
-
About to hire my first programmer. Using Visual Studio 2913 with code checked into Visual Studio Online' which uses TFS (Team Foundation Services) I want to protect my code from being 'ripped off' :) How should I protect my code? (I hope I am posting this in the correct place) Thanks for any help :)
1. You could make them partners in your company. Then they'd be stealing from themselves. 2. Give them profit sharing so that the more money the code makes the more money they make then they have no reason to steal it. 3. Pay them so handomely it would be more work to steal the code than to sit back and rake in the money you are paying them. :cool:
-
About to hire my first programmer. Using Visual Studio 2913 with code checked into Visual Studio Online' which uses TFS (Team Foundation Services) I want to protect my code from being 'ripped off' :) How should I protect my code? (I hope I am posting this in the correct place) Thanks for any help :)
-
THE ONLY BEST WAY IS TO FIND SOMEONE OR A PROGRAMMER YOU REALLY TRUST OR MAKE HIM OR HER A SHAREHOLDER IN YOUR BUSINESS.
-
About to hire my first programmer. Using Visual Studio 2913 with code checked into Visual Studio Online' which uses TFS (Team Foundation Services) I want to protect my code from being 'ripped off' :) How should I protect my code? (I hope I am posting this in the correct place) Thanks for any help :)
Is everything okay with your code and your employees now? I am about to do the same thing, I am not really good at these things. I proposed a term in the contract to prevent him from copying the code. Is this enough? Could you share what you have done? Thanks in advance :)
-
About to hire my first programmer. Using Visual Studio 2913 with code checked into Visual Studio Online' which uses TFS (Team Foundation Services) I want to protect my code from being 'ripped off' :) How should I protect my code? (I hope I am posting this in the correct place) Thanks for any help :)
There are plenty of software's that can help you keep your data secured. Google them !
-
About to hire my first programmer. Using Visual Studio 2913 with code checked into Visual Studio Online' which uses TFS (Team Foundation Services) I want to protect my code from being 'ripped off' :) How should I protect my code? (I hope I am posting this in the correct place) Thanks for any help :)
In computer science, method of maintaining proof of authorship (PoA) in code is done in the style of one of two approaches. The chosen approach is either A) a tangible, or B) an un-tangible. Tangible PoA methods are usually either literally simple like writing your name, username, ID number, into the code. This does work to some extent but can be removed, even if the thief doesnt remove the string, you must be able to show PoA of this string. So, make sure the string you use is verifiable to you as the string has to be able to show by verifification that you have PoA of the string (tag/ID number/email address etc.). Using this method, you could include a ciphertext string in the code if the plaintext had been encrypted using your public key. If the plaintext consisted of 'mr.xx wrote this code and owns all including intellectual rights to this code' for example, before insertion of the ciphertext string into the code, remember that the encryption key for this string must be one which your private key can decrypt. This therefore stamps the code with an easily provable PoA element, so if the code pops up somewhere else, you could demonstrate your explicit and exclusive PoA of the code. Another useful tangible approach method is adding 'red herrings' into the codebase. A red herring in this context is anything in the code that is nonsensical and usually syntactically invalid. If you added a few letters at random to the end of randomly-selected and randomly-ordered code lines it could be used an PoA as only you could explain it (showing your valid PoA); nowadays you could even include an encrypted statement of ownership and timestamp ciphertext that can only be decrypted by using your private key, then build a pseudorandom ciphertext-bit distribution process. The reverse of the distribution algorithm will collect and reconstruct the original ciphertext. You could then decrypt this ciphertext and show those who are concerned that you have PoA over the code. Whereas an intangible method would likely be computerised; one example is, the use of compartmentalisation to keep code secret from those who didnt code it. This can be done by writing chunks of code in various containers, such as; a written in javascript in a HTML setting. or a Python script batch that is called upon by the C++ applicationcodebase or even just host the secured script on sister server and code the applications interaction with the code via APIs like you would in most applications. Hope this helps
-
About to hire my first programmer. Using Visual Studio 2913 with code checked into Visual Studio Online' which uses TFS (Team Foundation Services) I want to protect my code from being 'ripped off' :) How should I protect my code? (I hope I am posting this in the correct place) Thanks for any help :)
There are several actions you can take to protect yourself and your business. 1. Establish a code of conduct. 2. Set up organizational checks and balances. 3. Institute policies and procedures. Thank me later at Oakton Tow Truck!
-
About to hire my first programmer. Using Visual Studio 2913 with code checked into Visual Studio Online' which uses TFS (Team Foundation Services) I want to protect my code from being 'ripped off' :) How should I protect my code? (I hope I am posting this in the correct place) Thanks for any help :)
This is a tricky one and it depends on the size of the code base you are trying to protect. Here are a couple of things you can try. 1. If the code represents a platform, and if the team is large enough you can segment the codebase into multiple repositories and then segment access to them e.g. repositories for the presentation tier (gui interfaces) and repos for services so no one in the team has access to the full set of code. 2. You can achieve similar things to the above by having "core" code e.g base and common classes which are compiled and provided as compiled assemblies to the rest of the team. This way they never work with the deep internals of the system. 3. If you are working with applications you can look into locking them down with code signing certificates. This not prevent the source code but it will prevent the team from taking the code and repackaging it for sale as they won't have the certificates. 4. If you are really paranoid, consider getting all developers to remote into a terminal services environment (or similar) for development, this prevents the ability for the developer to copy large number of coding files off the development environment. Hope this helps a little.
