←back to thread

258 points signa11 | 9 comments | | HN request time: 2.371s | source | bottom
1. AtlasBarfed ◴[] No.42733143[source]
Linux will politically continue to fail to extract needed monetary support from first world countries and mega corps principally dependant on it.

In particular, my libraries and national security concerns.

The US government has its underwear in a bunch over various Chinese sources hardware, but continues to let a bunch of hobbyists maintain the software.

I almost think it is time to hold these massive orgs accountable by merging targeted vulnerabilities and performance bombs unless they start paying up. Microsoft and other monopolized software companies have no issue using whatever tactics are necessary to shale the revenue from software dependent/ addicted orgs.

replies(4): >>42733564 #>>42733872 #>>42733985 #>>42734239 #
2. not2b ◴[] No.42733564[source]
Most Linux kernel contributors are professionals who are paid for their work. They aren't hobbyists.

However, there are quite a few critically important tools and libraries that are essentially maintained by a volunteer as a hobby, and yes, that's a risk.

replies(2): >>42733811 #>>42737960 #
3. SoftTalker ◴[] No.42733811[source]
Hence the observation that "single-maintainer projects (or subsystems, or packages) will be seen as risky".
4. nindalf ◴[] No.42733872[source]
Yeah bashing big tech is an evergreen source of upvotes. Especially since it’s not always clear how something was funded. Take io_uring for example, an async I/O subsystem for Linux. Could you say offhand if this was funded by some big tech company or not? I’ll bet most people couldn’t.

Another example - everyone knows the xz attack. How many people can name offhand the company where Andres Freund worked? He was a full time employee of a tech company working on Postgres when he found this attack.

It’s always worth discussing how we can improve financial situation for maintainers in important open source projects. Hyperbole like your comment is useless at best and counterproductive at worst.

5. jahewson ◴[] No.42733985[source]
Per Wikipedia:

“An analysis of the Linux kernel in 2017 showed that well over 85% of the code was developed by programmers who are being paid for their work”

https://en.m.wikipedia.org/wiki/Linux

replies(1): >>42734559 #
6. spencerflem ◴[] No.42734239[source]
If you don't want corporations using your software, don't put it out in a license that invites them to do so. (illegal scraping by ai notwithstanding)
replies(1): >>42735201 #
7. The_Colonel ◴[] No.42734559[source]
I would bet the percentage increased since then.
8. guappa ◴[] No.42735201[source]
I want them to use it, I don't want them opening issues to request new features.
9. AtlasBarfed ◴[] No.42737960[source]
There are trillions of dollars of budgeted organizations dependent on Linux.

I'm talking about serious hundreds of millions funded foundations on par with windows at least to some scale.

The US government should get forking over tens of millions. Hell, it should be part of the AWS contract with the government that they fund Linux foundation that tune.

Everyone crying over some reputation smear on Linux programmers are missing the goddamn point, especially on the desktop front.

If the US wants to continue to have wide open vulnerable consumer networks, then I guess windows will make us fundamentally vulnerable. The US military needs a consumer tier secure Linux desktop. And if rather it wasn't android corporate spyware because otherwise that is what we are getting.

I guess I just answered my question. Android for everyone.