Comment by sandeepkd
17 hours ago
Any company where understanding of security practices has a direct impact on its revenue from early phases can be considered as a security company in my view.
From what I have seen a large chunk of internet exists and stands on the shoulder of folks who did the volunteer work cause they were passionate about it and enjoyed that part. Once built, the nominal fee for API to check IP address should cover the costs way easily for the servers.
Letsencrypt is a great example, it did took away the big money from all these commercial CA's, who used to issue blue, green and what not kind of checkmarks. Thats one big reason reason why the migration to HTTPS happened faster.
The basic software is open source, and the list is free if you're running the tool and contributing detections back. They do have some curated lists that you have to pay for.
It's quite a bit less expensive than most other commercial products of this kind that I've looked at.
So I guess your answer is yes, you would like someone to do this work for you for free, because others have done other work for free. And then once the free work is done, you will happily pay a nominal fee to gain the benefit of all the free work?
> Any company where understanding of security practices has a direct impact on its revenue from early phases can be considered as a security company in my view.
This could, quite literally, be any company on earth then? But not CrowdSec, because they had a single security issue? Every company on earth has had those, including every security company.
There is discussion and then there is argument. Discussion is more about sharing and learning where as argument becomes all about proving a point, specifically individuals targeted point of view.
My observation is generic and more about state of things rather than focusing on one entity.
Also lets not belittle the hard work by just labelling it out as free. If only money had been motivation for everyone then the world would have been a different place. And like a lot of people I have done my share of passionate work that provided satisfaction to me and money for others, thats way tangential though
> My observation is generic and more about state of things
You are the one who stated a specific company wasn't a security company. When asked to define what one was, your definition included any company on the planet.
> Also lets not belittle the hard work by just labelling it out as free
Who is belittling it? My point is that it's hard work and should be rewarded, not expected by someone to be done for them.
fallacy and apologist point of view here. Shall we dig in?
fallacy is "Oh I guess you mean" .. insert large unsolvable and probably unpopular derailment. Bonus points for aggressive labeling of the opponent being opposed to money.
apologist - "Any company on earth" .. We all stand together, Every Company On Earth .. does this warrent serious replies?
What in the world are you going on about?
> aggressive labeling of the opponent being opposed to money
What? Where, exactly, did I do that? I stated they were opposed to _spending money_ on a service that they would find useful.
> Any company on earth
Their definition of a "security company" would include almost any type of company on earth, as long as they took security seriously. I asked them for a definition of a security company, since they claimed that CrowdSec wasn't one, and their definition had no boundaries.
Improve your reading comprehension and maybe study some actual logic, not whatever reddit nonsense you've got going here. But other than that, A+ work dude. I'm sure you were really impressed with what you wrote. "Shall we dig in?" ... ffs.