Take the 2-minute tour ×
Programmers Stack Exchange is a question and answer site for professional programmers interested in conceptual questions about software development. It's 100% free.

I was just wondering what kind of protocols a software engineer would go through if they were working at home for a company developing proprietary closed source software. Would you use a third party anti-virus or would you fear they could steal your code? Can you trust web hosting services like git-hub and bit-bucket? Would you keep your source code on an encrypted partition? Would you make any configurations to ensure windows could not steal your source code through some kind of built in feature? What other kinds of security concerns would you have and how would you deal with them?

share|improve this question

closed as unclear what you're asking by ratchet freak, Eric King, Robert Harvey, gnat, GlenH7 Apr 16 '14 at 18:14

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

A good contract and a good lawyer. –  MichaelT Apr 15 '14 at 19:12
Step 1: have a reasonable level of paranoia, and don't worry about unrealistic concerns. OS and AV vendors make plenty of money without venturing into the highly illegal field of stealing their customers' data. –  Andrew Medico Apr 15 '14 at 19:29
Honestly, @user55476, your examples are so far-fetched that they're simply not worth considering. –  user16764 Apr 15 '14 at 20:24
I should have closed this as too broad. My mistake. I recuse myself from this question. –  World Engineer Apr 15 '14 at 23:17
Too broad, primarily opinion-based, and unclear. The question, as written, is a poll. –  user16764 Apr 16 '14 at 5:37

2 Answers 2

up vote 1 down vote accepted

From a security standpoint, source code is no different from any other company document that you might be writing.

The security measures that you need to take depend completely on the security classification that is attached to the content.

For example, if you are working on/with top secret material (think, military secrets), then you won't be allowed to take the material off the premises at all (or leave it lying on your desk while you are away).

When it concerns company confidential material (which would be the bulk of all documents and source code), you are basically expected to take normal measures against theft, which means having an up-to-date OS and AV and using secure connections (VPN) to transfer the material over. The company policy might require encryption of laptop drives and discourage the use of USB disks.

All of those policies would apply to everyone working from home in the company, not just the programmers.

share|improve this answer

Well, you really need to rephrase your question, but anyways, just to add this to @Bart's answer, in our company we ask freelancers to write a module and test cases for it -- think about it like there is an empty wrapper that they will develop a single module on top of it, then after they delivered the source code, an in-house developer will integrate that module to our software, usually in a few hours.

In this way you won't transfer any part of the source code -- you will have to deliver only the wrapper, your source code documentation and API documentation, if needed.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.