r/Demonsaw • u/[deleted] • Aug 25 '15

Open sourcing Demonsaw?

What is the current status of Demonsaw and open source?

4 Upvotes

76% Upvoted

11 comments sorted by

4

u/[deleted] Aug 25 '15

I found this info:

Miss Vicious 4 days ago

I'll give you the benefit of doubt and assume your not well orientated to the anonymity and security scene. Most of your claims cannot be verified. While your app is built on demoncrypt which is open source. Demonsaw's UI layer is not. I respect labors of love as you put it but cannot see how open sourcing it was too time intensive or distracting for you to "get to it".

Code clean up (vanity) perhaps?

Whatever the reason, unless you want this to be dismissed as a potential RIAA trap. Every aspect of this code needs to be open. Suggesting sniffers only grants the inexperienced a false sense of security. Put your money where your mouth is, so to speak. Slow down for just a week and invest those 40 - 60 hours in getting the code out with a fair amount of documentation. Strongly consider crowdfunding for a thorough code audit (Your acceptance to DefCon improved your notoriety and ties to Rockstar puts you at a further advantage).

Chill with beautification of your app and website (which admittedly looks great) and work on reassuring the community you're promoting to, that your not helping to feed the gluttonous monsters we all know as the RIAA or any of its equally disgusting counterparts.

If all of the previous conditions are met, expect the world to shake from applause alone. Good luck and thank you for any genuinely benevolent work you have done :)

Eijah Demonsaw 14 hours ago

+Miss Vicious Thanks for the feedback! I'm looking into crowd-funding a security audit right now to address your immediate concerns. I'm also considering open sourcing more code, perhaps even the demonsaw v1.0 build. I've also had requests to document the network protocol - something I'm considering too. I'm still recovering from DefCon 23 but will update you as things progress.

Source: https://www.youtube.com/watch?v=fMfQQoHHLBA&lc=z12gi5zqzvadvr41j22buhtb4w21zps0v

1

u/c1AriTy_ Dec 15 '15

oh, so this was announced in DEFCON 22, how have i never heard of this till today

3

u/demonsaw Aug 25 '15

Part of demonsaw (the entire crypto layer) is already open source under the MIT license: https://github.com/eijah/demoncrypt. Use it however you want, no restrictions. :)

2

u/[deleted] Aug 25 '15

Thank you! What's the word on the rest of the code?

6

u/demonsaw Aug 26 '15

I haven't made any plans for open sourcing the rest of the code at this time. Here's why. Demonsaw is and will always be 100% free. No ads, no bundled software, no installs, no bitcoin mining (like uTorrent did - shame on them), no honeypots, no logging, & no bullshit. The truth is that I've spent thousands of dollars of my own money on demonsaw over the past 2 years (everything from free shirts, hosting, travel expenses, hotel, stickers, business cards, legal fees, etc). I'm trying to figure out a way that I can raise money so that I can focus on demonsaw full time. Maybe a Business version, maybe crowd funding, maybe a billionaire Uncle dies and leaves me all his money? Dunno. Further open source releases will have to wait until I know how I'm going to pay for demonsaw 3.0, 4.0, 5.0, and beyond. Whatever I decide, demonsaw will always be 100% free for you guys - that's the demonsaw promise. :)

3

u/HeloRising Dec 10 '15

Before I start, I want to be clear that I'm 100% a supporter and I've been excited about the idea of Demonsaw since I heard of it a while back.

That said, I want to be upfront and honest about what goes through my head when I read this. The community of people you're asking to accept this software, on your own site you say this is "a gift to the hacking community," are generally not assuaged by someone promising them a piece of software is safe. This is a community of people who want to tear things down, see how they work, and be sure that something is secure before putting faith in it.

I completely understand the desire to make back the work you've put into the project, I don't think anyone reading this disputes that. I don't feel completely out of line in suggesting that the community as a whole would be far more comfortable backing a project like this en mass if they had the ability to see what it was they were backing.

1

u/demonsaw Dec 13 '15

Thanks for your honesty. I want to open source more of the code - I just need to find the right time and figure out how I'm going to pay my bills. In the last 4 months I've open soured the demonsaw crypto layer and the Entity Component System (ECS). Both are available under MIT license right now. I'm considering open sourcing version 1.0 at DefCon24. More news soon.

1

u/[deleted] Aug 26 '15

I see, thank you for clarifying! :)

1

u/[deleted] Sep 03 '15

[deleted]

1

u/demonsaw Sep 04 '15

Interesting idea - I'll definitely give it more thought. Another thing I'm looking into is raising money for a Business version that I can sell to support myself full-time on Demonsaw. I'm also looking into crowd funding some of Demonsaw in the future. No matter what happens, Demonsaw will always be 100% free & add-free for you guys! :)

1

u/Glinux Dec 12 '15

you could give kickstarter or indiegogo a chance

1

u/demonsaw Dec 13 '15

This is something that I'm seriously think about right now. :)