Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Source code protection at Microsoft

Here's another question about source code protection... So far I haven't been convinced with the answers to similar questions found on this site (NDAs on the legal side, trusting employees vs. protected code, etc.) So I'd like to formulate it in a different manner:

How do large companies do to protect their source code? E.g. I have never heard that the Windows, MS-DOS source code was ever stolen, reverse engineered? What steps does a large company like Microsoft take to protect their code?

like image 816
ericdes Avatar asked Nov 01 '10 15:11

ericdes


People also ask

How does Microsoft protect their source code?

Also, Windows source code is available to anyone willing to sign an agreement (not sure if one needs to pay anything): microsoft.com/en-us/sharedsource. So for really big companies like Apple and Microsoft, they protect their IP using THE LAW (not the answer you wanted but it's the truth).

Can you protect source code?

Implementing network security solutions such as firewalls, Virtual Private Networks (VPN), anti-virus, and anti-malware software count as basic protection. These solutions safeguard your source code from external exploits of hackers and ensure secure data sharing between employees and data sources.


3 Answers

One very important factor is that working with complex source code requires solid domain knowledge. So complex code becomes largely useless without the people that wrote it. Even if some third party steals all the code it will likely be unable to make alterations to it or use it.

One good example is SQLite - all its code is public domain and published. How much time will someone without solid knowledge of its inner workings need to make any alterations or analysis of that code? And SQLite is not a very big piece of software. Yet people developing it support it and publish updates all the time.

like image 161
sharptooth Avatar answered Oct 06 '22 10:10

sharptooth


I have never heard that the Windows, MS-DOS source code was ever stolen, reverse engineered?

Well, than you haven't been listening very carefully. Reverse engineering Microsoft's operating system code happens all the time. Go read books like "Undocumented Windows 2000 Secrets: A Programmer's Cookbook" or "Windows NT/2000 Native API Reference" by Gary Nebbet. Or remember what Cogswell and Russinovich did before being bought by Microsoft.

Also, around 6 years ago, (parts of) the source code of Windows 2000 was leaked:

http://www.wired.com/science/discoveries/news/2004/02/62282

like image 42
Jim Brissom Avatar answered Oct 06 '22 12:10

Jim Brissom


First, they pay enough and have big enough legal and security teams to make it not worth it for most employees to think of taking the risk of leaking it. Second, they limit the access to their source control systems based on the portions of the codebase that particular developers need access to.

like image 42
Yuliy Avatar answered Oct 06 '22 10:10

Yuliy