Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

We all depend on open source. We will defend it together

akrites.org

Post reply on HN
Print view View original

231–240 of 257 posts

Re: We all depend on open source. We will defend it together

#231

Post by forgetfreeman »

bborud wrote: post #220
forgetfreeman wrote: post #184

Earlier quoted context omitted.

Having coded back end projects in PHP, Perl, Python, and Node idk wtf folks who make comments like this are on about. Node took all of the worst aspects of JavaScript and spread them to back end development. Someone should have ended up on trial in the Hague for that particular crime against humanity and PHP is what you're grumbling about? Seriously?

I’ll grant you that there are good arguments in favor of your position. PHP, and then later JavaScript have both filled the world with more fragility and chaos than was necessary.

Uh huh. Because python development is a fortress of stability and security... /s

Re: We all depend on open source. We will defend it together

#232

Post by trinsic2 »

ninjagoo wrote: post #84

> We are joined by Amazon Web Services, Anthropic, Chainguard, Cisco, Citi, Endor Labs, Ericsson, Google, IBM, JPMorganChase, Microsoft and GitHub, NVIDIA, OpenAI, RapidFort, Red Hat, Rust Foundation, Sonatype, Vodafone, and Zscaler A lot of open source folks are going to be very skeptical, rightly so, of this group of players. > ... to find, fix, and responsibly disclose vulnerabilities in critical open source softw…

Yep. This was my first thought when I saw what it does and who's on board. The commons cannot be in the hands of for-profit companies. What ever this needs to be it has to be distributed so no single centralized location or entity can exercise control over it.

Re: We all depend on open source. We will defend it together

#233

Post by trinsic2 »

nickelpro wrote: post #212
tga_d wrote: post #190

Earlier quoted context omitted.

I don't see how that was implied? Just because someone is part of the "club" doesn't mean many other "members" can't be skeptical of their role. In fact, it doesn't even seem difficult to simultaneously acknowledge and commend the valuable role they play, while also expressing concern over the influence they wield and how it might contrast with desires and goals of the wider community.

They are the wider community. Programmers working on behalf of corporate actors write open source code in the commons because their organizations have discovered competing on some parts of the stack isn't as viable as collaborating on parts of the stack. I won't pretend to speak to specific numbers, but a huge amount of work and maintenance is from these programmers, or funded via the corporate actors which employ th…

I'm sorry, your response does not adress the real world concern about the powe that for-profit entities wield over the entire software industry. So I am going to assume you just want to focus on part of the problem.

Re: We all depend on open source. We will defend it together

#236

Post by windexh8er »

ninjagoo wrote: post #84

> We are joined by Amazon Web Services, Anthropic, Chainguard, Cisco, Citi, Endor Labs, Ericsson, Google, IBM, JPMorganChase, Microsoft and GitHub, NVIDIA, OpenAI, RapidFort, Red Hat, Rust Foundation, Sonatype, Vodafone, and Zscaler A lot of open source folks are going to be very skeptical, rightly so, of this group of players. > ... to find, fix, and responsibly disclose vulnerabilities in critical open source softw…

This looked great until I saw that list. It feels, to me, as if all of these companies are scared of the risk. The risk that decades of tech debt and shitty products sold at a premium built on other people's work will now come back to reverse brand fuck them.

I've worked for one of these companies and it was built on OSS and they contribute absolutely nothing back. They just take. And they've literally built a product of duct tape and band aids out of OSS that they charge a premium for.

What a joke. This week keeps getting more bizarre by the hour.

Re: We all depend on open source. We will defend it together

#238

Post by whattheheckheck »

windexh8er wrote: post #236
ninjagoo wrote: post #84

> We are joined by Amazon Web Services, Anthropic, Chainguard, Cisco, Citi, Endor Labs, Ericsson, Google, IBM, JPMorganChase, Microsoft and GitHub, NVIDIA, OpenAI, RapidFort, Red Hat, Rust Foundation, Sonatype, Vodafone, and Zscaler A lot of open source folks are going to be very skeptical, rightly so, of this group of players. > ... to find, fix, and responsibly disclose vulnerabilities in critical open source softw…

This looked great until I saw that list. It feels, to me, as if all of these companies are scared of the risk. The risk that decades of tech debt and shitty products sold at a premium built on other people's work will now come back to reverse brand fuck them. I've worked for one of these companies and it was built on OSS and they contribute absolutely nothing back. They just take. And they've literally built a produc…

Which one

Re: We all depend on open source. We will defend it together

#239

Post by LtWorf »

bigfishrunning wrote: post #153
seanclayton wrote: post #113

I yearn for the day I see a headline like "We All Depend on Open Source. We Will Fund It Together"

Many of these bigger companies are "funding open source" by paying their employees to participate. Look at all of the corporate email addresses on the LKML for instance...

You mean they are "overtaking open source communities" by hiring 1 or 2 people.

I got a 2 weeks ban from python's discuss when I suggested that core developers who work on python as part of their day job could disclose who their employer is.

Re: We all depend on open source. We will defend it together

#240

Post by latexr »

chrinic7294 wrote: post #230
latexr wrote: post #92

Earlier quoted context omitted.

> I prefer easy. Clearly you don’t feel that strongly about it. You know what would’ve been easier than making an account just to post that comment? Not doing that. Have you also stopped working, paying your bills, showering, eating, interacting with other people? Not doing any of that is easier than doing it.

> Clearly you don’t feel that strongly about it. You know what would’ve been easier than making an account just to post that comment? Not doing that. I’m here to remind the thousands of readers that they are not alone. The vast majority (99%?) of us, absolutely do not give a shit about open source.

> I’m here to remind the thousands of readers that they are not alone.

You made an account to “remind people” they have support in… Doing the easy thing… Which is doing nothing? I fail to see who needs that.

> The vast majority (99%?) of us, absolutely do not give a shit about open source.

Absolutely the wrong website to make that claim. That number is way off.

Post reply on HN