Live data from Hacker News

Public Money, Public Code

publiccode.eu

121–130 of 156 posts

Re: Public Money, Public Code

#121

How about Public Money, Public Data? For instance, there’s a whole industry around finding public legal information about companies. State’s websites offer throttled database access, some offer data for free, but most selling it for dozens of thousands of dollars (officially)

italy does: both dataset and public websites, but it's italy and the list is more incomplete than not.

see https://github.com/italia

Re: Public Money, Public Code

#122
post #93

this has always puzzled me. Companies gets millions from the taxpayers to certain projects to develop their (something) Then another company get another million to develop same or similiar thing. Why it is not a required that if you get taxpayers' money, the results should be available for free to everyone, let's say after 12 months of grace perioid ??

> Why it is not a required that if you get taxpayers' money, the results should be available for free to everyone, let's say after 12 months of grace perioid ?? Probably depends on the development in question, but in general the ability to resell something to someone else changes the calculations for contract work. If you want me to develop something and then own it is not the same deal as me developing something tha…

It also depends on the nature of the software. Administrative software can usually be exported without issue because it doesn't threaten the administrative service. But certain technology is a strategic investment to create a domestic industry that can self-fund expensive R&D, so you may need a moat if it's inexpensive to copy the result.

Re: Public Money, Public Code

#123
post #77

I’ve heard those exact words from a government developer in Berlin and it felt really good to hear. Imagine making pull requests to improve government services! Some people would gladly do it.

Imagine getting 10,000 pull requests and 7 originate from KGB hackers that solve a real problem but contain a vulnerability.

Valid risk [0], but that shouldn't keep the gov from making the code public. Open source / free software has its unique challenges, but it's a more fair model to people, and also it doesn't have challenges that arise from the code being "secret".

[0] example with the Linux kernel: https://www.theverge.com/2021/4/22/22398156/university-minne...

Re: Public Money, Public Code

#124

I am fully in support of such initiative. So I am interested to hear what the possible downsides are? Please share your opinions on the matter as I can only see upsides to this.

For the common folk, there's no downside. For the people in power, more transparency means fewer avenues to exercise control, fewer places to hide activity.

Re: Public Money, Public Code

#125
post #3

There will be ignorant arguments against this due to cyber security concerns, enemy nations benefiting from the code, the copyrights of the people/companies who are being paid to write the code, etc., etc.

I can't tell if this is sarcasm or genuine sentiment.

100% genuine. I don't like that this will happen, but I believe it will.

Re: Public Money, Public Code

#126
post #95

Earlier quoted context omitted.

I don't understand the argument. Municipalities / counties have many common software needs. If they collaborated on open source software we would likely get higher quality services at lower cost, what's bad about that?

Is them cooperating on open source software a realistic outcome? Or will there be many small, unmaintainable, slightly different, open projects? Why are they not already collaborating on closed source software? Looking at the mess of customizations asked for software by companies doing the same thing, I can't imagine it would be different for counties/municipalities. (edit: Please don't misunderstand, I am not agains…

They are currently using closed sourced software, because it was sold to them, on god knows what terms, and how many people paid off. As with many other things in life, it's not about the thing itself, but about the people involved.

Re: Public Money, Public Code

#127
There are four reasons this is difficult to actually work:

A. Most people in government positions don't know/care about open source. Nobody will educate them for the following reasons.

B. Most private implementors don't want to open source stuff because it will make easier for other companies to study their code, making it easy for them to get contracts for updates to that code. Avoiding open source in general also increases the total cost so more profit for the implementing party (fe selling also Oracle licenses is much better than using postgresql)

C. Code in the open is easier to be audited by hackers for exploits. This is even more problematic because government code is supported by private contracts and may be left unsopported for some time due to bureaucracy.

D. This is the most important. Open sourcing projects opens the door for cost auditing. We've seen crazy things like simple CMSs costing millions of euros. Although these may be simple wordpress sites, they get away with them because they can say that they are custom implemented, have huge back office etc. Open sourcing them will reveal the scam.

Source: I work in a public sector organisation in an EU country and have dealt many times with projects by outside contractors.

Re: Public Money, Public Code

#128
post #117

Earlier quoted context omitted.

I work for a nonprofit. Most of git repos are public but nobody cares. It's all pretty uninteresting.

is it uninteresting or just not scalable for a human to dig through; content vs index/search problem?

I read uninteresting as not very very useful for an external party in general. It was likely developed for an organization's fairly unique needs, is probably not very well documented, and there's no community in the sense that most genuinely useful open source projects have. Dumping a big one-off repo of code is fine but probably no one's going to put the work into seeing if this project that was never intended to be general-purpose is worth trying to adapt for something else.

Re: Public Money, Public Code

#129
post #77

I’ve heard those exact words from a government developer in Berlin and it felt really good to hear. Imagine making pull requests to improve government services! Some people would gladly do it.

Imagine getting 10,000 pull requests and 7 originate from KGB hackers that solve a real problem but contain a vulnerability.

It's risk management. close 10,000 quick wins and hypothetically introduce 7?

many bug fixes open new bugs anyway due to poor architecture, this is what we should focus on

the prc is a greater threat than Russia anyway

Re: Public Money, Public Code

#130

Earlier quoted context omitted.

Imagine getting 10,000 pull requests and 7 originate from KGB hackers that solve a real problem but contain a vulnerability.

Wow, even using "Russians under the bed" to attack FOSS now.

even worse, we know for a fact all the shit the NSA did to our software, but muh spoopy russians instead
Post reply on HN