I really like this system. I’d like to build a system to add some of my and my friends‘ important important information into the system. But I’m afraid that our info will be stolen or hacked. How to protect this system? Or should I just change into another system?

We take security very seriously at Discourse. We welcome any peer review of our 100% open source code to ensure nobody’s Discourse forum is ever compromised or hacked. You can read more about that at discourse/docs/SECURITY.md at main · discourse/discourse · GitHub

The only way to fully secure any piece of software (online or offline) is to take it to the desert, drop it in a 20ft hole and dump cement over it. So, 100% continuous, permanent security is not possible (just look at Denuvo). But, if the question is “Is open source software more secure than closed…

The main site settings you would want to flip on here HTTPS, obviously! secure email (don’t leak content over email) login required (don’t show content to anons) account approval required or invite only to taste (don’t allow anyone except people you know / approve) to join Can you thi…

[صورة] jaevanryssel: A good thing to know about Discourse based on what I’ve read on this forum/meta is that any image, uploaded document (pdf, word, excel, etc.) can be accessed even when the forum is set to private if somebody from outside the forum knows the exact url for the file. Wouldn’…

Hi! I totally love Discourse so far for my community’s needs. Thanks so much for building it. I also do research on the security of open source projects. For this research I rely heavily on the National Vulnerability Database, which is where a lot of major vendors and open source projects disclose …

From my perspective that is covered by our security doc in the repo… the first two paragraphs of it specifically… which covers our public bug bounty program URL and where you can click to see a list of security checkins live 24/7.

Don’t nvd work directly with hackerone here? It seems far more beneficial than working directly with Discourse on this.

Thank you for your reply. Your current security policy is certainly impressive in a lot of ways. However, I still think there are benefits to having your security vulnerabilities reported to NVD that your current policy does not provide. Now, if I understand correctly, you announce security fixes …

ما مدى أمان Discourse؟

الدعم

SidV 16 يناير 2018، 12:51م 3

Mmm

How many sites like Discouse do you know that has got HackerOne 's services ?

8 إعجابات

الموضوع		الردود	مرات العرض
Add security category in Discourse Site feedback	3	755	30 يناير 2022
Newbie Question re: security Support	11	282	20 فبراير 2025
Discourse Security Self-hosting	6	735	1 سبتمبر 2021
Inquiring about the Security Measures in Discourse Support	3	1019	11 فبراير 2023
Show Discourse version on the /about page Feature	11	3034	11 مايو 2024

ما مدى أمان Discourse؟

الموضوعات ذات الصلة