Is there a good overview of recent Open Source Rugpulls in the vein of killedbygoogle.com somewhere?
MinIO is now in maintenance-mode
161–170 of 338 posts
Re: MinIO is now in maintenance-mode
#162It sucks that S3 somehow became the defacto object storage interface, the API is terrible IMO. Too many headers, too many unknowns with support. WebDAV isn't any better, but I feel like we missed an opportunity here for a standardized interface.
? Its like GET /object, PUT /object. To me its the most obvious mapping of HTTP to immutable object key value storage you could imagine. It is bad that the control plane responses can be malformed XML (e.g keys are not escaped right if you put XML control characters in object paths) but that can be forgiven as an oversight. Its not perfect but I don't think its a strange API at all.
!!!
I’ve seen a lot of bad takes and this is one of them.
Listing keys is weird (is it V1 or V2)?
The authentication relies on an obtuse and idiosyncratic signature algorithm.
And S3 in practice responds with malformed XML, as you point out.
Protocol-wise, I have trouble liking it over WebDAV. And that's depressing.
Re: MinIO is now in maintenance-mode
#163Earlier quoted context omitted.
You can, sort of, sometimes. Copyleft is still based on copyright. So in theory you can do a new license as long as all the copyright holders agree to the change. Take open source/free/copyleft out of it: You create a proprietary piece of software. You license it to Google and negotiate terms. You then negotiate different terms with Microsoft. Nothing so far prevents you from doing this. You can't yank the license fr…
I think you are correct, but you probably misunderstood the parent. My understanding of what they meant by "retroactively apply a restrictive license" is to apply a restrictive license to previous commits that were already distributed using a FOSS license (the FOSS part being implied by the new license being "restrictive" and because these discussions are usually around license changes for previously FOSS projects su…
Right but depending on the exact license, can the copyright holder revoke your right to redistribute?
Re: MinIO is now in maintenance-mode
#164They have been removing features from the open source version for a while. The closest alternative seems to be RustFS. Has anyone tried it? I was waiting until they support site replication before switching.
Garage is a popular alternative to Minio. https://garagehq.deuxfleurs.fr I hadn't heard of RustFS and it looks interesting, although I nearly clicked away based on the sheer volume of marketing wank on their main page. The GitHub repo is here: https://github.com/rustfs/rustfs
Yeah, that page is horrendous and looks super sketchy. It looks like a very professional fishing attempt to get unsuspecting developers to download malware.
They have a lot of obviously fake quotes from non-existent people at positions that don’t even mention what company it is. The pictures are misgendered and even contain pictures of kids.
Feels like the whole page is AI generated.
Re: MinIO is now in maintenance-mode
#165Earlier quoted context omitted.
? Its like GET /object, PUT /object. To me its the most obvious mapping of HTTP to immutable object key value storage you could imagine. It is bad that the control plane responses can be malformed XML (e.g keys are not escaped right if you put XML control characters in object paths) but that can be forgiven as an oversight. Its not perfect but I don't think its a strange API at all.
That may be what S3 is like , but what the S3 API is is this: https://pkg.go.dev/github.com/aws/aws-sdk-go-v2/service/s3 My browser prints that out to 413 pages with a naive print preview. You can squeeze it to 350 pretty reasonably with a bit of scaling before it starts getting to awfully small type on the page. Yes, there's a simple API with simple capabilities struggling to get out there, but pointing that out is…
That page crashes Safari for me on iOS.
Re: MinIO is now in maintenance-mode
#166What a story. EOL the open source foundation of your commercial product, to which many people contributed, to turn it into a closed source "A-Ff*ing-I Store" .. seriously what the ...
I still don't understand what the difference is. What is an AI Stor (e missing on purpose because that is how it is branded: https://www.min.io/product/aistor )
Looks like AI slop
Replication
A trusted identity provider is a
key component to single sign on.
It’s probably just Minio but it costs more money.
Re: MinIO is now in maintenance-mode
#167Minio is more or less feature complete for most use cases. Actually the last big update of minio removed features (the UI). I am using minio for 5 years and haven't messed with it or used any new thingie for the last 5 years (i.e since I installed it); I only update to new versions. So if the minio maintainers (or anybody that forks the project and wants to work it) can fix any security issues that may occur I don't…
I used it for my experiments in Docker. I once or two used the UI, I always connected through python.
Re: MinIO is now in maintenance-mode
#168As a note ceph (rook on kubernetes) which is distributed blockstorage has a built in s3 endpoint support
Re: MinIO is now in maintenance-mode
#169What a story. EOL the open source foundation of your commercial product, to which many people contributed, to turn it into a closed source "A-Ff*ing-I Store" .. seriously what the ...
I still don't understand what the difference is. What is an AI Stor (e missing on purpose because that is how it is branded: https://www.min.io/product/aistor )
About a billion dollars difference in valuation up until the bubble pops.
Re: MinIO is now in maintenance-mode
#170big L for all the cloud providers that made the mistake of using it instead of forging their own path, they're kind of screwed now
How are they screwed if they can adopt the source and continue patching it? Writing their own would incur a greater cost.