This argument is unfortunately flawed. If the customers had been handed the software on day 1, by day 100 it would be full of security bugs, would need to be re-written for the new version of Node.js (the old one having been deprecated and also full of security bugs). They'd have to find somewhere to run it and pay someone to keep an eye on that deployment for when it does something weird that affects service. Oh and they'd have to maintain mobile apps on Android and iOS as those platforms change and break things. They might need to buy cyber risk insurance too.

AI tools do show promise of being able to handle all these things in the future, but at least for the past few years these customers had an incredible bargain vs what it would have cost them to run and maintain the application even if they had the source code for free.

If they had used a desktop Win32 binary as you suggested, that would also have needed security updates, and it wouldn't have worked on phones or macbooks, and it would have needed a back end service (see above).

▲

swiftcoder 6 hours ago | parent | next [-]

> If the customers had been handed the software on day 1, by day 100 it would be full of security bugs, would need to be re-written for the new version of Node.js (the old one having been deprecated and also full of security bugs).

We don't have to make everything a javascript app running on the open internet. Though even an insecure node server could be perfectly fine if deployed on the corpnet behind a VPN...

	▲	ffsm8 6 hours ago \| parent [-]
		Thats a very spicy threat model post the age of IoT. Any stray device you may not even be aware of can rip that assurance apart. A fully locked down network can in theory enable this however, very few enterprises actually are strict enough for this to be enforced across the whole network.

▲

dehrmann 5 hours ago | parent | prev | next [-]

Even shrinkwrapped software is subscription-based. It's just whether the subscription is monthly or every 5 years.

▲

HumblyTossed 5 hours ago | parent | prev | next [-]

> This argument is unfortunately flawed. If the customers had been handed the software on day 1, by day 100 it would be full of security bugs

Stop. This doesn't have to be true...

> Oh and they'd have to maintain mobile apps on Android and iOS as those platforms change and break things. They might need to buy cyber risk insurance too.

This worked just fine, also, until Apple decided to have meetings with devs of popular software to push for subscriptions. Not we have the current state of bullshit.

▲

vinyl7 6 hours ago | parent | prev [-]

> day 100 it would be full of security bugs, would need to be re-written for the new version of Node.js

I do not believe this is the case at all. If I'm running software locally that works on local files that I control then there is no security issue. Even if there are bugs that can be exploited, they won't be exploited because I'm in control of the data.

This whole mess is a non-issue and is only there as an excuse to push this horrible web SaaS subscription nonsense that we have. It's nothing but a stupid excuse to justify daily software updates so that companies and inject ads and remove features to push subscriptions.