Live data from Hacker News

Email Encryption Software Relies on One Guy, Who Is Going Broke

propublica.org

231–240 of 469 posts

Re: Email Encryption Software Relies on One Guy, Who Is Going Broke

#231
post #57

Earlier quoted context omitted.

Why aren't those organisations paying him money?

For the most part, they're open source and have no significant revenue. Or they're small for-profit companies and they can't spare the revenue. Or they're large companies and no one with a budget and decision power is even aware they use the product. Or they're Red Hat... With limited budget for this and unlimited needs to cover.

Red hat pays people to write open source software. The skinflints are the companies publishing closed source stuff and the consumers using free software.

Re: Email Encryption Software Relies on One Guy, Who Is Going Broke

#233

Earlier quoted context omitted.

I'll check that out. Thank you!

By all means. Ed25519 (which underlies signify) is a pretty decent modern signature scheme. (tweetnacl.c also implements it, in less code.) It also seems you want to expire things, so I do feel I have to warn you that signatures are a totally separate thing to a secure time source, which is a whole different bag of marbles. However, since what you're designing sounds like a logic bomb/copy protection/DRM system, I mu…

So, use case would be something like:

Software is shareware, gets a little naggy within 30 days of license expiration, send money to get a new license file, which makes the nagging go away. No cessation of service.

I'm not worried about clock spoofing--I assume basically good-faith customers.

Signing would help people from just copy-pasting certificates around. If they want to go into the executable and rewrite the routines, well, there's only so much one can do, yes?

Re: Email Encryption Software Relies on One Guy, Who Is Going Broke

#234

Earlier quoted context omitted.

> open source and free for non-commercial, require a donation if it is used in a commercial product Every serious definition of 'open source' or 'free software' says that you can't discriminate by field of endeavour - if you have one set of rules for commercial use and one for non-commercial use, it's not really open source. And the nature of donations is that you can't require them. That's not to say that you can't…

Nope. We call it Free and Open Source Software for a reason. Open Source means the code is open (i.e., you can study it), Free means it's licensed under a Free Software license (it doesn't necessarily mean free of charge). People usually omit the "Free and" part when they talk about FOSS. https://en.wikipedia.org/wiki/Free_and_open-source_software // Anybody want to tell me why you vote me down? Am I wrong?

Nope what? You didn't actually contradict anything he said.

Re: Email Encryption Software Relies on One Guy, Who Is Going Broke

#235
post #229

Earlier quoted context omitted.

Nope. We call it Free and Open Source Software for a reason. Open Source means the code is open (i.e., you can study it), Free means it's licensed under a Free Software license (it doesn't necessarily mean free of charge). People usually omit the "Free and" part when they talk about FOSS. https://en.wikipedia.org/wiki/Free_and_open-source_software // Anybody want to tell me why you vote me down? Am I wrong?

Almost nobody would call merely viewable source "open source". Certainly not the OSI.

I see. I call that free software, because "having access to the source code" is part of free software licenses.

The kind of "open source" I was talking about is source code that is released under a non-free software license. What do we call that?

---

@alexvoda "it's not really open source" is the part I tried to contradict. I may have been wrong though.

Re: Email Encryption Software Relies on One Guy, Who Is Going Broke

#236
post #64

Earlier quoted context omitted.

You are using Ubuntu, I see from your profile. How much have you paid them? This is how the stories goes: we haven't figured out how to make good work worthwhile. Perhaps we can learn something from our vast experience in profitably peddling shit?

We're our own worst enemies. Software developers have this sort of circular firing squad where nobody wants to be the first to keep their source closed and try to charge for it. Because then you're just "greedy" and not pure enough. But that'll never change unless all of a sudden we say "Ok, on the count of 3, everybody stop giving away their hard-earned expertise for free. 1... 2... 3..." We're like musicians nowada…

The anti-GPL , pro-BSD/MIT consumers are a selfish minority.

But there are library authors who publish BSD (governnent funding) who can't partner with GPL. It's unfortunate.

Re: Email Encryption Software Relies on One Guy, Who Is Going Broke

#237

For bitcoin donations, you can go to [1], which gives the address as 12LKeo24XCzgz6ASSxcUa8BvUfzkEyCpGq [2]. The address is not generated per user, and is dedicated to GnuPG. [1] https://www.wauland.de/en/donation.nojs.html [2] https://blockchain.info/address/12LKeo24XCzgz6ASSxcUa8BvUfzk...

Thanks! Just donated what I had left on my phone and added 25Eur via paypal

Re: Email Encryption Software Relies on One Guy, Who Is Going Broke

#238
post #52

For bitcoin donations, you can go to [1], which gives the address as 12LKeo24XCzgz6ASSxcUa8BvUfzkEyCpGq [2]. The address is not generated per user, and is dedicated to GnuPG. [1] https://www.wauland.de/en/donation.nojs.html [2] https://blockchain.info/address/12LKeo24XCzgz6ASSxcUa8BvUfzk...

Can someone signal boost this on bitcointalk or other bitcoin communities? They are huge users of PGP. I don't have accounts on any of those sites or I'd do it myself.

I have spread the word in bitmessage chans. People there are certainly concerned about privacy and love free software.

Re: Email Encryption Software Relies on One Guy, Who Is Going Broke

#239
post #159

Earlier quoted context omitted.

Shouldn't it be part of that Core Infrastructure Initiative project then?

Matthew Green, who sits on the CII's advisory board, tweeted: "CII does what's beneficial to its members. Privacy tools aren't" [ https://twitter.com/matthew_d_green/status/56338899320386764... ] ...which indicates to me that GnuPG wasn't sold properly. It's not just a "privacy tool" -- it's one of the ways that software (including OpenSSL) is securely distributed. I would guess that quite a few of the CII's members…

CII is a consortium of consumers of free software, not publishers. If openSSL meds gpg, openssl should spend its funding on gpg.

Perhaps via a "Free Core Infrastructure Initiative"

Re: Email Encryption Software Relies on One Guy, Who Is Going Broke

#240
The problem of reward for innovation is one that goes back a long ways under the market / capitalist system.

The tale of the unrewarded genius is legion, one set of substantiation is presented in Gregory Clark's A Farewell to Alms looking at key inventors of the early Industrial Revolution: John Kay (flying shuttle), James Hargreaves (spinning jenny), Richard Arkwright (spinning frame), Samuel Crompton (spinning mule), Reverend Edmund Cartwright (power loom), Eli Whitney (cotton gin), and Richard Roberts (power loom, machine tools).

Of the list, Kay, Hargreaves, and Roberts died in poverty. Crompton and Cartwright were granted substantial payments by acts of Parliament (£5,000 and £10,000 respectively), Whitney made money through arms sales to the U.S. government, and of the lot, only Arkwright earned significant wealth, half a million pounds, after his patents stopped being honored by other manufacturers.

Invention and information goods fare poorly in economic systems.

Most of us are coloured by the experience of Microsoft from 1980 - 2000 or so, but what is generally not recognized is that Microsoft as a seller of "shrink-wrap" software was exceptionally anomalous. Most other pure-play software firms were nowhere near as profitable as Microsoft. Some technology companies had large revenues, but they were often based on hardware (Sun, HP), professional services (Oracle, Price Waterhouse), or both (IBM). Hardware does well, but has a small fraction of the profit margin of software, and professional services -- brains by the bucketful -- is very difficult to scale. Companies which do well at the latter almost always have a distinctly mafia-like reputation (IBM, EDS, Oracle, PWC, Accenture, etc.).

Werner's situation is unfortunate, and I really do hope he finds a way to survive. He's hardly alone, and frankly, the proprietary commercial model has proven highly problematic as well.

Post reply on HN