this post was submitted on 26 Oct 2024
74 points (75.7% liked)

Asklemmy

43682 readers
2179 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy πŸ”

If your post meets the following criteria, it's welcome here!

  1. Open-ended question
  2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
  3. Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
  4. Not ad nauseam inducing: please make sure it is a question that would be new to most members
  5. An actual topic of discussion

Looking for support?

Looking for a community?

~Icon~ ~by~ ~@Double_[email protected]~

founded 5 years ago
MODERATORS
 

I for one am going through quite a culture shock. I always assumed the nature of FOSS software made it immune to be confined within the policies of nations; I guess if one day the government of USA starts to think that its a security concers for china to use and contribute to core opensource software created by its citizens or based in their boundaries, they might strongarm FOSS communities and projects to make their software exclude them in someway or worse declare GPL software a threat to national security.

top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 1 points 3 hours ago

Unfortunately no.

I remember the selinux controversy and the nsa trying to slip bad algorithms in.

[–] [email protected] 2 points 4 hours ago

I think the prestige of "maintainers" and contributions/control are what is being torn down. Anyone anywhere is still welcome to contribute, they are simply limited from direct control. They can still fork at any time, anyone can. Getting people to follow your fork is another thing entirely, and your open source code will still likely be incorporated directly or indirectly. The only thing that has changed is the misguided prestige that has grown around the project and is not a required or relevant part of the project as a whole.

[–] [email protected] 2 points 4 hours ago

This shows that no open-source project can really be directed from the US, or if they are then a fork should exist and be maintained by BRICS citizens who are obviously viewed as lesser, at least in the Linux project.

[–] [email protected] 7 points 4 hours ago (1 children)

It's basically the same as me not installing that Flappy Bird copy because the dev is Russian. I don't trust it, even if the code is available to review.

We also learned a lot about trust with that file zip software a year or so ago. I don't remember the details of that, but open source doesn't automatically mean secure.

[–] [email protected] 4 points 4 hours ago

One of the big weaknesses of open source is the same as democracy. Nobody has time to review every piece of code (or research and hold accountable every politician) which leads to risks.

[–] [email protected] 5 points 5 hours ago* (last edited 5 hours ago)

What happened this time?

Edit, answered elsewhere:

Recently, Linux removed several people from their organization that have Russian email addresses. Linus made a statement that confirmed this was done intentionally. I believe that there was some mention of following sanctions on Russia due to the war. I haven’t looked into the details of it all, so take my analysis with a grain of salt. From what I understand, it sounded like it was only Russian maintainers that were removed and normal users submitting code from Russia can still contribute. Maintainers have elevated permissions and can control what code gets accepted into a project, meaning that a bad actor could allow some malicious code to sneak past. This may have also contributed to the decision since this type of attack has happened before and Russia seems like a likely culprit. The reactions to this change have been varied. Some people feel it is somewhat justified or reasonable, some people think that it means it is no longer open source, and some people think it is unfairly punishing Russian civilians (it is worth noting that that is part of the point of sanctions).

[–] [email protected] 3 points 5 hours ago (1 children)

Hasn't changed my view much. I already knew Linux was a company that has a legal presence in the US and so would be subject to their laws. The only real surprise is that it's taken so long to action this particular set of sanctions.

I do think the announcement was poorly handled - it should have been explained either before or immediately afterwards to cut back on the conjecture. The git notice only said that these contributors' names had been removed from the credits, not that they'd been stopped from contributing completely. Any company, including Linux, that does something they know is going to be contentious like this should bloody well get ahead of that curve and put the facts out.

The world is at war. It's not a bloody world war as we've seen before, but it is nation against nation by other means. FOSS is used so widely it is absolutely a target and nobody can be so idealistic that they cannot see the conflict, nor not know that it's constantly being attacked. Where you live does matter. I wish that wasn't the case - I truly do, but it's naive in the extreme to pretend otherwise.

[–] [email protected] 0 points 5 hours ago

This wasn't a decision made based on sanctions, it was just an excuse given but no actual evidence of Linux being required to act on them was ever given.

[–] [email protected] 3 points 7 hours ago

From what I understand this wasn't a decision dictated by sanctions nor was there any strongarming. Otherwise it would've happend way earlier.

I also think splitting politics and literally anything else doesn't work and is something people who benefit from the discussion (or lack therof) made up.

[–] [email protected] 1 points 8 hours ago

People are just waking up to the fact that theory isn't reality.

[–] [email protected] 4 points 8 hours ago

Yes. I always thought of sanctions as being finance-related, meaning you can't transact with sanctioned groups. I figured it couldn't apply to decision-making/membership in non-profit organizations (that it might somehow violate "free speech" or some shit). Finding out this is not the case is terrifying and one more reason to hate the US (not that we needed more). This might disincentivize some people to contribute to FOSS.

[–] [email protected] 1 points 9 hours ago

Everything be it software or anything else is beholden only to those who is the highest bidder. Being FOSS doesn't change anything. This has been true for some time now that Linux and TLF is duty bound to businesses running it.

It had been covert till now, it is the overtness of this action which is surprising to most. I for one am surprised it didnt happen sooner.

[–] [email protected] 9 points 9 hours ago

Well, in theory open source is immune to all that. However, the country a project is registered at, matters. That's why the RISC-V project, for example, took its headquarters from the US to Switzerland. For that exact reason: so no country could strong arm it, especially since Chinese were the major contributors to the project (Switzerland is not 100% neutral, but it's more neutral than other countries).

[–] [email protected] 3 points 10 hours ago

Nothing is devoid of global politics.

[–] [email protected] 2 points 10 hours ago
[–] [email protected] 2 points 10 hours ago

@[email protected] Views on the idea, no. But it confirmed my opinion that the current socio-economic system is unfriendly to FLOSS

[–] [email protected] 5 points 10 hours ago (2 children)
[–] [email protected] 3 points 9 hours ago

Nothing is devoid of global politics.

Russian maintainers were unceremoniously kicked out citing compliance issues.

[–] [email protected] 7 points 9 hours ago (1 children)

Recently, Linux removed several people from their organization that have Russian email addresses. Linus made a statement that confirmed this was done intentionally. I believe that there was some mention of following sanctions on Russia due to the war. I haven't looked into the details of it all, so take my analysis with a grain of salt. From what I understand, it sounded like it was only Russian maintainers that were removed and normal users submitting code from Russia can still contribute. Maintainers have elevated permissions and can control what code gets accepted into a project, meaning that a bad actor could allow some malicious code to sneak past. This may have also contributed to the decision since this type of attack has happened before and Russia seems like a likely culprit. The reactions to this change have been varied. Some people feel it is somewhat justified or reasonable, some people think that it means it is no longer open source, and some people think it is unfairly punishing Russian civilians (it is worth noting that that is part of the point of sanctions).

[–] [email protected] 1 points 5 hours ago

As per usual, the discussion of the Linux drama far exceeds the actual drama. I'm guessing most of those people will still contribute.

[–] [email protected] 7 points 11 hours ago

No, only of Linux

[–] [email protected] 13 points 11 hours ago

@Artemis_Mystique No.

It changed my view on how true to their ideas some people are.

[–] [email protected] 9 points 11 hours ago (1 children)

Just this one. The philosophy is still there, Linus and TLF have abandoned it with great hubris. I am very disappointed in them.

[–] [email protected] 7 points 11 hours ago* (last edited 11 hours ago) (1 children)

I'm thinking about that conspiracy theory of Linus having been made an offer one can't refuse, when some time ago he took a vacation and returned with news about seeing the error of his ways.

It almost coincided with Stallman being canceled for one of his usual highly socially unacceptable, but in principle consistent opinions. With most of the attackers being frankly some new random corporate-associated people, not very active in real communities.

Maybe I'll re-read J4F and compare Linus from there to these events. Canary and all.

EDIT: Before you downvote this for the mush in my head (thx Linus) propagating conspiracy theories, offers one can't refuse are not exactly an impossible thing. And WWII radio games, where, having captured an enemy station's operator, one of the sides could either imitate their style in transmissions or just force them to transmit what it wanted.

[–] [email protected] 4 points 9 hours ago

I mean he has accepted a position as a luminary at the x86 ecosystem advisory group the most dominant and proprietary instruction set ever formed by companies with vested interest to keeping it in use and prevent competition (RISC-V & ARM) from catching up.

[–] [email protected] 7 points 12 hours ago
[–] [email protected] 0 points 12 hours ago* (last edited 12 hours ago)

Certain Open Source movements are pure bigotry and opportunism, the Linux Kernel / The Linux Foundation for example, so it doesn't really make me wonder.

[–] [email protected] 5 points 13 hours ago

I get that it's a nice daydream to think of open source projects as existing in some kind of independent, ethereal vacuum just because the code is out there and accessible from any place on Earth. But every software project is (mostly?) dependent on the jurisdiction in one country, in this case it's the US, and so their laws about sanctions and so on apply. And yes, this means that unless conflicts/wars between nations happen to cease, that we will eventually have completely separated blocks of politics/culture/military and also IT. Globalization is over. China will have their own stuff, Russia will have their own stuff, and US+EU will have their own stuff. And none of those countries should continue using high-tech products made by the other because they could be sabotaged and it might be hard to find, so it's best to not use them at all and just cook your own stuff. It's unfortunate, but bound to happen in the current state of the political world.

load more comments
view more: next β€Ί