I really like this system. I’d like to build a system to add some of my and my friends‘ important important information into the system. But I’m afraid that our info will be stolen or hacked. How to protect this system? Or should I just change into another system?

We take security very seriously at Discourse. We welcome any peer review of our 100% open source code to ensure nobody’s Discourse forum is ever compromised or hacked. You can read more about that at discourse/docs/SECURITY.md at main · discourse/discourse · GitHub

The only way to fully secure any piece of software (online or offline) is to take it to the desert, drop it in a 20ft hole and dump cement over it. So, 100% continuous, permanent security is not possible (just look at Denuvo). But, if the question is “Is open source software more secure than closed…

The main site settings you would want to flip on here HTTPS, obviously! secure email (don’t leak content over email) login required (don’t show content to anons) account approval required or invite only to taste (don’t allow anyone except people you know / approve) to join Can you thi…

[图片] jaevanryssel: A good thing to know about Discourse based on what I’ve read on this forum/meta is that any image, uploaded document (pdf, word, excel, etc.) can be accessed even when the forum is set to private if somebody from outside the forum knows the exact url for the file. Wouldn’t p…

Hi! I totally love Discourse so far for my community’s needs. Thanks so much for building it. I also do research on the security of open source projects. For this research I rely heavily on the National Vulnerability Database, which is where a lot of major vendors and open source projects disclose …

From my perspective that is covered by our security doc in the repo… the first two paragraphs of it specifically… which covers our public bug bounty program URL and where you can click to see a list of security checkins live 24/7.

Don’t nvd work directly with hackerone here? It seems far more beneficial than working directly with Discourse on this.

Thank you for your reply. Your current security policy is certainly impressive in a lot of ways. However, I still think there are benefits to having your security vulnerabilities reported to NVD that your current policy does not provide. Now, if I understand correctly, you announce security fixes …

Discourse 的安全性如何？

支持

SidV 2018 年1 月 16 日 12:51 3

Mmm

How many sites like Discouse do you know that has got HackerOne 's services ?

8 个赞

话题		回复	浏览量
Add security category in Discourse Site feedback	3	755	2022 年1 月 30 日
Newbie Question re: security Support	11	282	2025 年2 月 20 日
Discourse Security Self-hosting	6	735	2021 年9 月 1 日
Inquiring about the Security Measures in Discourse Support	3	1019	2023 年2 月 11 日
Show Discourse version on the /about page Feature	11	3034	2024 年5 月 11 日

Discourse 的安全性如何？

相关话题