ramsey,
@ramsey@phpc.social avatar

This is part of the reason I couldn’t get to a good place (mentally) in order to do a real “Saving Open Source” talk at :

From @geerlingguy: “2024 is the year corporate open source died”

https://www.jeffgeerling.com/blog/2024/corporate-open-source-dead

ramsey,
@ramsey@phpc.social avatar

Maybe it’s just time to say “fuck it” and all the things?

The movement was a response to corporate skittishness around using , and it focused on very permissive licenses to make corporations feel more comfortable using it. Maybe that turned out to be the wrong approach. Maybe the helped create the problem.

If the OSI helped create it, encouraged and exacerbated it.

kboyd,
@kboyd@phpc.social avatar

@ramsey I've been on the fence about gpl-all-the-things myself. It might indeed be time.

Crell,
@Crell@phpc.social avatar

@ramsey I'm now making all my code some *GPL. Which variant depends on context.

MIT/BSD are "free labor for corporations" licenses, which is why they like it. Screw that.

Anything short of AGPL on the web is an attack on users.

See also: https://youtu.be/sJpXhVD18-c

jay,
@jay@phpc.social avatar

@Crell @ramsey I think about that now and then, but then chicken out because "nobody will use it anymore, then" :/

Crell,
@Crell@phpc.social avatar

@jay @ramsey For a library, LGPLv3 is fine. If someone has an issue with that, I don't want them using my code.

Fpr a full application that you install, AGPLv3 or bust. If someone wants to use my labor for free, they can damned well respect their users. If they don't want to, they don't get to use my work.

ekis,
@ekis@mastodon.social avatar

@ramsey I'm happy to see you settled on a GNU license

Everything I work on, hardware and software, is GPLv3 (despite the criticisms)

Stallman gets a lot of flak, and some of it is warranted

But as far as important things to come out of the hippies from the 60's I would have to put the open source concept and eventual licenses as one of the greatest achievements of computer science

It wouldn't exist, its that simple

Beyond a shame not in other sciences, closed source firmware on sequencers?

ekis,
@ekis@mastodon.social avatar

@ramsey If two schools buy two different versions of the same sequencer, but they have firmware differences.

The replication problem plaguing all sciences becomes pretty obvious.

How can you know if your firmware is the same as the other schools? What if it has a bug?

And the cost of the equipment being a fraction of the product is just upsetting. 500k for automated syringe on GCMS? Fucking hell

ekis,
@ekis@mastodon.social avatar

@ramsey It was a massively bad sign that the biggest opponent of open source software was allowed to buy the biggest repository of open source software.

Everyone who worked, or specifically owned github, and sold it to Microsoft are some of the biggest class traitors to ever exist.

They could have sold it to anyone else, but it shows how either they truly didn't understand their role, or their greed was more important than basics of computer science.

ramsey,
@ramsey@phpc.social avatar

@ekis In the last decade, Microsoft has been releasing a lot of their software under permissive open source licenses.

ekis,
@ekis@mastodon.social avatar

@ramsey They also ruined the search functionality of Github, you can't get more than a few pages of code based searching (and have to be logged in)

They added a marketplace

And none of their changes have addressed any serious problems with open source communities: like governance

Instead they went the way of trying to collect payments. Which seems premature when the governance system is completely missing

To me what they have done feels like being served red kibble, then tell us its good

ramsey,
@ramsey@phpc.social avatar

@ekis I can’t argue with that.

marvin,
@marvin@hulvr.com avatar

@ramsey

You can find Bruce Perens on mastodon. After cofounding the OSI which created many of the problems we face today, his current big idea is called postopen.

It's like a funhouse mirror of the GPL. Powerful centralized organization with taxation powers, naive worship of small business, payment mechanisms that can be gamed and lead to endless disputes, and worse.

Unrealistically utopian in the very worst sense of the word. I would be frightened to live in a world where it could exist.

ramsey,
@ramsey@phpc.social avatar

@marvin Oh, I know. I’ve been following it, and I don’t think it’s the answer at all.

vascorsd,
@vascorsd@mastodon.social avatar

@ramsey yes please. gpl and agpl all the things. companies running away scared scared of it and not wanting to touch it is good and on purpose! if they can't play good, they shouldn't play at all.

ramsey,
@ramsey@phpc.social avatar

I wonder if the community has grounds to sue any of these companies who are ditching the AGPL in favor of proprietary, source-available licenses, especially under “third-party beneficiary contract” legal theories, like @conservancy did in their suit against Vizio.

If the source code originally used AGPL, isn’t it still contractually obligated to ensure those rights to its users, including any new source code added to it?

lewiscowles1986,
@lewiscowles1986@phpc.social avatar

@ramsey @conservancy
One of the models of true FOSS is that folks can do this, but they need to buy a license exception from the license holder.

If somehow redis labs became the license holder as example, they can do WETFTW (whatever the F**** they want)

In a Stallman situation he'd have sought to enforce his commits were pulled.

ramsey,
@ramsey@phpc.social avatar

@lewiscowles1986 @conservancy In truth, I know how this all works. I’m exploring the hypothetical “what if the licensor is bound by the license themselves?”

Obviously, everyone and their brother wants to point out that I misunderstand this and it’s not the case because the licensor can do whatever they want, since they own it. Yep, I know that.

But, when you release something to the Commons, is it really yours anymore? (That’s the gist of what I’m exploring.)

ramsey,
@ramsey@phpc.social avatar

@lewiscowles1986 @conservancy And I really do think there’s a good argument here for, “No. You don’t own it anymore.”

lewiscowles1986,
@lewiscowles1986@phpc.social avatar

@ramsey @conservancy
@isaacs argued for similar when I complained about npmjs restoring a package that was maliciously updated.

NPM walked back the new version (effectively just refusing to distribute it) if I understand correctly and restored the prior version against the author consent.

lewiscowles1986,
@lewiscowles1986@phpc.social avatar

@ramsey @conservancy
Ah. Mine was less for you and more for others reading your posts; but I guess in a raw sense, even if closed source, there is no physical or natural way to compel anyone not to use any "public code" or "code they can read"

Like if I took away the CLI daemon shell to redis and embedded it into a closed executable, most folks wouldn't know. I could further rename a bunch of symbols and I could likely get away with it... but I'd definitely be sith / dark-side at that point.

ramsey,
@ramsey@phpc.social avatar

@lewiscowles1986 @conservancy You might also be infringing upon their copyright.

lewiscowles1986,
@lewiscowles1986@phpc.social avatar

@ramsey @conservancy
In volation of a copyright doesn't mean much though was my point. I Get it, it could ruin your life and reputation if you do it. My point is more about the practical, actual limitations, natural or physical, or which there are none. It's like the invisible wall the mime fights against.

LinuxAndYarn,
@LinuxAndYarn@mastodon.social avatar

@ramsey @conservancy I think there's a severability for new source, treating it as a customization, which is why everything forks from the last (A)GPL release.

derickr,
@derickr@phpc.social avatar

@ramsey @conservancy Why would any new code not under AGPL be covered by it?

ramsey,
@ramsey@phpc.social avatar

@derickr @conservancy Because it’s viral. Any modifications you make to the source code that is licensed under GPL/AGPL must also provide the same rights to users.

derickr,
@derickr@phpc.social avatar

@ramsey @conservancy Sure. The original code is still free under AGPL.

But if you relicense the whole source (as say BSL), then new code is no longer AGPL.

ramsey,
@ramsey@phpc.social avatar

@derickr @conservancy How can you relicense the source, if the license is non-revokable?

derickr,
@derickr@phpc.social avatar

@ramsey @conservancy The license for what is released under the license is indeed not revokable. That doesn't prevent relicensing under a non copyleft license (as long as you have permission under one form or another).

vascorsd,
@vascorsd@mastodon.social avatar

@ramsey @derickr @conservancy copyright holder of a piece of software always can change the license of NEW code release. But that can only be done if and only if they are the sole copyright holder over the software. That happens because people sign CLAs waving their own rights to code they contribute.

An already released piece of code out there under gpl cannot be changed retroactively to something else.

ramsey,
@ramsey@phpc.social avatar

Wasn’t the whole point of the GPL that there could never be a rug-pull?

It doesn’t matter that you own the copyright on the software, you can’t revoke the rights on the code that was licensed under its terms. Therefore, even the copyright holder is bound by these terms. They can fork their own project, but if they want to relicense it, since the existing source includes these license terms, any new source must also give users the same rights. Right?

That’s the whole point. Right?

derickr,
@derickr@phpc.social avatar

@ramsey No. Not if you can relicense the whole code base because you have all the rights to it (or get every contributor's permission). For example through CLAs where contributors give you a non exclusive right to do whatever you want with their contribution. Unlikely to happen with GPL, but quite common for companies using the AGPL (like MongoDB did).

ramsey,
@ramsey@phpc.social avatar

@derickr Those contributors would have to completely assign their copyrights, and even then, I’m not convinced that the original owner could technically change the license. I don’t think this argument has ever been made in court.

derickr,
@derickr@phpc.social avatar

@ramsey Yes, they have to agree with it in one way or another.

Which is exactly what many companies with AGPL software require: a CLA that reassign copyright, or ones that allow the CLA owner to do whatever they want with a contribution.

hisham_hm,
@hisham_hm@mastodon.social avatar

@ramsey @derickr Unfortunately contributors completely assigning their copyrights via CLAs is extremely common. But I've been told that even without explicit copyright assignments it is possible for majority maintainers to change a license under some circumstances (I remember this came up in the context of the @htop license, do any of the current maintainers have any more pointers?)

ramsey,
@ramsey@phpc.social avatar

@hisham_hm @derickr @htop Yes. It’s possible to change the license without input from the contributors, as long as you’re not changing any of the end-user rights they implied with their contributions. For example, it might be possible to change from a BSD-like license to an actual BSD license, because the rights granted by each contributor are not changing.

linc,
@linc@phpc.social avatar

@ramsey I worked for a company that used GPLv2 with a CLA precisely so they could relicense. It's the "rules for thee, not for me" licensing tactic, used for when startups are concerned about their ability to sell out if all their code is GPL-bound. You basically use your accrued CLA rights to publish a "new" copy that isn't encumbered. I forked a GPLv2 project from that company but I don't have the CLAs so my fork is GPLv2 forever.

linc, (edited )
@linc@phpc.social avatar

@ramsey Basically, you need significant contributions outside the company under the GPL without a CLA for it to "stick" — at least, that's my understanding of prevailing legal theory. I don't think most license strategies have been tested in court because they turn into protracted Google v Oracle messes because suddenly the entire industry cares.

grmpyprogrammer,
@grmpyprogrammer@phpc.social avatar

@ramsey I was actually surprised that you didn’t talk about how nobody gave a shit about all your OSS contributions while job hunting

ramsey,
@ramsey@phpc.social avatar

@grmpyprogrammer I did mention that, but only in passing.

ramsey,
@ramsey@phpc.social avatar

@grmpyprogrammer My original subtitle was something like “A Tragedy (of the Commons) in Five Acts,” but we all know tragedies never end well. Usually, everyone dies. It was getting pretty depressing and dark, so I changed tactics.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • kavyap
  • thenastyranch
  • Durango
  • DreamBathrooms
  • ngwrru68w68
  • magazineikmin
  • cisconetworking
  • Youngstown
  • mdbf
  • slotface
  • osvaldo12
  • GTA5RPClips
  • rosin
  • InstantRegret
  • provamag3
  • everett
  • cubers
  • vwfavf
  • normalnudes
  • tacticalgear
  • tester
  • ethstaker
  • khanakhh
  • modclub
  • Leos
  • anitta
  • megavids
  • JUstTest
  • All magazines