Live data from Hacker News

Public Money, Public Code

publiccode.eu

121–130 of 216 posts

Re: Public Money, Public Code

#121

Earlier quoted context omitted.

Your incentive is that you are being paid.

Imagine "Microsoft Office"-complexity software developed specifically for public sector. Then, sold to public sector once, then everyone else is free to use it. Would Microsoft still develops Office? Unlikely.

I mostly want the code to public as a matter of transparency. I'd be fine if it was released under a fairly restrictive license which would prevent this kind of re-use.

Re: Public Money, Public Code

#122
Suppose you are on a committee where you are evaluating 3 different offers to build a website for your city. Bid A is for $10m, Bid B is for $9.5m, and Bid C is for $9m. The company that made offer B knows that they will likely lose the contract so they counter. "If you let us keep the source code and it remains private, we will bid $8.5m for the contract". Since all three vendors are offering equivalent service, and vendor B is offering a hefty $500,000 discount, how can you reasonably spend far more or your city's money? That money could have gone to improve schools or roads or make more competitive offers for city employees. How can you justify spending a half million more on software principle when there are other more pressing needs?

Expecting software to be open source is nice when there is an army of 10s of thousands of FAANG employees to constantly keep it up to date, but less so when there's limited people. Sure, it hypothetically could be kept up to date by the generous and capable people of the city after the fact, but that's farfetched. It isn't realistic or practical for a budget-conscious software company to open them selves up to scrutiny, participate in the open source community, accept bug fixes, do code reviews from strangers, etc. It's more expensive to do OSS, not less.

(As an example, the Linux Kernel is mainly made by large companies with lots of expensive employees. Pick your 10 favorite GitHub project with more than 10k stars and see who the primary contributors are.)

Re: Public Money, Public Code

#123
post #66

I know of several situations where entrepreneurs in europe put substantial money on the table in projects which were funded by grants from the government. It would be really bad for entrepreneurship in europe if it would be required to make software open source the moment some grant money is involved. Let's imagine you spend 500K of your savings, and the government gives you a 50K grant. Now you need to open source y…

This doesn't require open source for everything that receive a grant. The text of the open letter is “Implement legislation requiring that publicly financed software developed for the public sector be made publicly available under a Free and Open Source Software licence.”

It's more like if the tax office build a software to compute taxes, you can use it to compute your taxes, add a simplified a gui for basic users or incorporate it in your ERP.

Re: Public Money, Public Code

#124

Suppose you are on a committee where you are evaluating 3 different offers to build a website for your city. Bid A is for $10m, Bid B is for $9.5m, and Bid C is for $9m. The company that made offer B knows that they will likely lose the contract so they counter. "If you let us keep the source code and it remains private, we will bid $8.5m for the contract". Since all three vendors are offering equivalent service, and…

Well, making it open source is not the same as making regular citizens/programmers to work on it.

You still pay the company to develop and maintain the software. Same way as open source developers get "sponsored". The reason is that anyone who wants to see the code and suggest on how to make it better, or to report a bug, then that would be possible. Furthermore, that work can be reused by other parts of the government.

That last point is why some companies wouldn't want to do it, or would charge more. However, to your point, I think the increased cost is worth it in this case.

Sure, there are going to be less better roads/schools by 500k, but the problem with that money is that there are rarely big projects for that amount, so it's not like they would be put to best use without being "lost" in the process of relocation.

Re: Public Money, Public Code

#125
post #44

Earlier quoted context omitted.

I was tangentially related to the covid app stuff so I can offer some insight there: most of those apps weren't built by the state. Google provided an open-source "base app" that could be customized by the states, but most states hired third-party contractors to build an app for them. I've worked in public sector and this is typical. the states can't open source it because they don't own it, they just pay a third-par…

> but most states hired third-party contractors to build an app for them. So the states paid the bills so can license the result any way they want. How can they pay for something and not own it? Sounds to me like there are deep corruption problems

> How can they pay for something and not own it?

Cloud SAAS e.g. Salesforce apps

Re: Public Money, Public Code

#126
post #50

Earlier quoted context omitted.

I don't see what corruption has to do with it. I'm a subcontractor and usually the contractual terms are dictated by my clients. If I get the chance however, I put forth my terms and these say that I'm the author of the code and thus the copyright holder.

When I've done freelance work and have been able to write the contract, I include a clause that the client receives "a perpetual, worldwide, non-exclusive, royalty-free, irrevocable license to reproduce, prepare derivative works of, publicly display, publicly perform, and distribute the work and such derivative works, and to sublicense any or all of the foregoing rights to third parties," effectively giving them unli…

It's a good idea so you don't need to worry about accidentally copying some code from one project to another. If you weren't the owner, they could theoretically come after you for copyright violation.

Re: Public Money, Public Code

#127
post #119

Earlier quoted context omitted.

I can’t tell based on the information on the site, but there may be some nuance to the threshold where this becomes a requirement. I imagine it will not be an all or nothing situation, but I am not sure ultimately. Also, if there was a bunch of public code available because of grant funding, that means - in theory - many people might not have to invest their own money (or quite as much) because there is more out ther…

ah yes, in good european fashion, there will be all kinds of complicated and time consuming rules and processes. that is what the countries in the EU and the commission do best. make it nearly impossible for small bootstrapped companies to be competitive and get their shit done. and if I as an entrepreneur put money into something, I expect to own it. even if a grant was involved. after all, I already paid taxes to m…

Frankly it sounds like you're prematurely grinding your axe. We don't have enough details to really form an opinion like that. As a fellow entrepreneur I am excited at the idea of more open collaboration/resources for people writing code. Hell imagine a world without GitHub.

I'm curious to see the nitty gritty here myself.

Re: Public Money, Public Code

#128

The state I lived in developed one of those covid tracking apps. I asked for the source code and was told it wasn't available and would never be. I talked to people working on other software developed for the state and they all think that software shouldn't be public. It seems crazy to me that taxpayers pay for this software but it doesn't belong to them. Knowing what I do know I gotta wonder if it's just about those…

My most recent job was for a local government, and even though I made a push for open sourcing our code, I never made much headway. Plus, literally all of the other devs on my team repeatedly committed secure credentials to git no matter how many times I tried to teach them how to use a .gitignore file, so it could have been a bit disastrous if my efforts had actually made any headway

I'm not surprised. Even great devs sometimes slip up and when you have enough people, someone is always slipping up. The only real solution IMO is to have safeguards in place like credential scanning (ideally both locally and on the server). It's not foolproof, but it can help avoid or minimize a lot of incidents.

Re: Public Money, Public Code

#129
post #44

Earlier quoted context omitted.

I was tangentially related to the covid app stuff so I can offer some insight there: most of those apps weren't built by the state. Google provided an open-source "base app" that could be customized by the states, but most states hired third-party contractors to build an app for them. I've worked in public sector and this is typical. the states can't open source it because they don't own it, they just pay a third-par…

> but most states hired third-party contractors to build an app for them. So the states paid the bills so can license the result any way they want. How can they pay for something and not own it? Sounds to me like there are deep corruption problems

> How can they pay for something and not own it?

Actually, quite easily, and it's cheaper that way (especially if they pay to acquire it, and it wasn't exclusively developed for them.)

Which is also why they would do that.

Re: Public Money, Public Code

#130

The state I lived in developed one of those covid tracking apps. I asked for the source code and was told it wasn't available and would never be. I talked to people working on other software developed for the state and they all think that software shouldn't be public. It seems crazy to me that taxpayers pay for this software but it doesn't belong to them. Knowing what I do know I gotta wonder if it's just about those…

This is the kind of issue that causes all that government bloat... If I was a state employee and I wrote the app, and I had to release the source code, then I'm making it very easy for a bad actor to find a vulnerability and exploit it to leak the data of citizens. One might respond: "Well software shouldn't have those holes! Just because it's closed source, doesn't mean that won't happen anyway Also true, in an idea…

> If I was a state employee and I wrote the app, and I had to release the source code, then I'm making it very easy for a bad actor to find a vulnerability and exploit it to leak the data of citizens.

I have spent a lot of time in public sector IT and I’ve rarely seen a management or information security team that didn't subscribe to this kind of security through obscurity thinking for internal code, including the management teams that were completely behind using open source code for cost, robustness, and avoiding vendor risk.

Post reply on HN