Open-Source Exploitation - David Whitney - NDC London 2024

[@PaulSebastianM]

David Whitney is a wonderful human being for having the courage to talk about this on the behalf of millions of open source developers.

[@RoamingAdhocrat]

And also generally.

[@yucelevrimer-qj9io]

About 5 years ago I asked a company to pay for fluent validation. I had met the main contributor and we used it all throughout everything. A simple gesture of just £500-1000 to a large company is nothing... But no... David. Thanks for this brave talk. Awesome

[@KasperPlougmann]

Yes! I've been looking forward to seeing this talk being uploaded. Now I can share with colleagues the golden nuggets I myself consumed 😅 This may have been the best talk I've seen in years

[@jorgerangel2390]

As a software developer, I agree with everything this man says in this talk

[@tomaszgora4353]

Nothing more relevant in light of xz debacle and what happened to Redis

[@jernejkavkajkssw6662]

I watched this live in London and it was an incredible and eye-opening presentation that turned what I felt about this topic into words, slideshows and a very good discussion! It's topic that is hard to talk about not just because of the complexity of the problem, the "Software should be free" mantra and all heaps of other can of worms that get open but also because you need to have a lot of guts to talk about this openly and honestly. David Whitney does an amazing job in advocating this. 😊

[@SyntaxSeed]

I have been saying this for years now, because my life & family is full of entrepreneurs & insight into the business side of the equation... and I can 100% tell you that businesses will squeeze every drop of value out of free things & they will never support these packages financially unless forced to. It's only 'fun' to work for free if it a cooperative among peers who are all building for & sharing with each other.

[@SyntaxSeed]

You might want to build OSS for others like you... but open your eyes to the corporate vampires who have woken up to the juicy wealth that is OSS & they can't wait to drain it dry.

[@bobweiram6321]

There are numerous stories of open source authors who were turned down for employment by the major software companies even they use their open source code heavily. Man, the beatings are relentless!

[@toooes]

@@bobweiram6321any examples of this off the top of your head? Kinda tricky to search for that

[@CrucialFlowResearch]

​@@toooes developer of homebrew rejected by google who use it

[@toooes]

@aquarius6722 having once contributed to that project myself, I can say confidently it is a bit of a heap 😅so, I’m not too surprised

[@ukyoize]

Use AGPL because corporations are afraid to use it.

[@hypermiraclepositivegirl2415]

Funny you say this as the company I work for is currently using AGPL licenced software in one of our closed sourced projects.

[@CrucialFlowResearch]

​@@hypermiraclepositivegirl2415 so you are breaking the law for an employer who doesnt care if you go to prison?

[@For_M.]

sad but absolutely true

[@stephenholmes7585]

An excellent presentation that should be listened to widely!

[@Kane0123]

"And that's what I'm changing about my own behaviour" - a level of reflection and thoughtfulness that everyone should strive for. Two things I kept thinking about throughout the chat. How would this change if we included opensource contributions as part of existing anti-exploitation in the supply chain paperwork? I have needed to sign several of these as part of client engagements, I wonder how transparency about what opensource tech we use and how we contribute to it would cause some reflection at a corporate level. I contribute to open source projects that I pull in as dependencies when delivering projects. But I guess my hope is that the underlying parts that I don't consider (things like xz fall into this) are already being taken care of it because its too hard for me an individual to go through the entire chain to allocate the individual dollars between everyone. But for someone like Microsoft, either you say you've vetted the entire chain (and thus could do that attribution) or you acknowledge you haven't (and thus can't talk to me about the security it offers). You can't know everything except how to contribute to those background pieces. I hope David gives more talks - regardless of whether its around opensource or not. -Kane, a person who just got 45minutes of solid information followed by an hour of solid reflection after paying $20 for premium, of which a fraction of a cent will go to NDC, of which 0% will go to David. Thanks to those who paid full whack at NDC London.

[@raughboy188]

Basicaly David suggests all the open source developers to implement Unreal Engine's style of software licencing. Unreal engine is open source and sky is a limit what you can do with it but if you use it to make money you pay them royalty after first 1000000 usd. The way unreal engine does it is open source software in truest sense.

[@edgeeffect]

I dunno "relentlessly negative" sounds like the sorta talk I want to hear. ;)

[@frankhaugen]

Didn't Metallica argue for shutting down the actual internet because of file sharing?

[@olafschluter706]

Whitney is right on the meaning of "free software" in the original proposals, including all GPL licenses. However, the GPL license itself teached one to give away work without payment: if you obtain a copy of GPLd software free of charge, you are obliged to give back all your modifications and additions to that software to those giving you the GPL to use it, and so your work will be incorporated in the free-of-charge copy of the GPLd software. I remember that I struggled in the 90s with the idea to charge for giving away GPLd software, as there could always be someone (and there always was someone), who distributes the source free of charge and is entitled to receive your work. You can't compete with free-of-charge if you cannot differentiate your product from that free of charge. Which the GPL enforced. So the GPL, although not permissive, introduced the idea that FOSS is always free of charge - not by intent, but by mechanisms combined: those of the license and those of the market. It could have been different, if every GPLd software had an organisation of all copyright holders (everyone contributing to the GPLd software becomes part of that group) organising the then obligatory charging for distribution and distributing the income to the copyright holders.

[@babakfp]

38:16 Thank you too for giving this speech!

[@logiciananimal]

I've always wondered how to handle the "organization size" question. I'm a Canadian federal public servant; what's the scope here? Does a government (albeit at one remove - I'm a bureaucrat, not a politician) count as a for-profit organization? Is it the entire public service that counts, or my one department, or ...? I know that people have thought about these matters, but I do think it is interesting (and very important) to think about the complexity. I tried to find a way to officially contribute to the livelihood of an open source and free library maintainer that had a project that saved my bacon for years - and failed, because it was not a product recognized as "for sale". :(

[@edgeeffect]

I thought the whole point of governments was to make profits for it's elected "representatives".

[@someguyO2W]

I've recently started work on a project I've made opensource. I love this video because it highlights a huge issue I struggled with. It is a dev tool. I'd like to make money off it and possibly retire on it, but I also want the community to have access to it. I really struggled with going MIT, but eventually, I decided to sell a subscription to premium packages. Packages you yourself could build with the core tool, but which I've prepackaged for you. Hopefully, the packages are worth it to people such that they pay me for them. It's really difficult.

The path to approach is "creators should have been paid" depending on usage of their artwork. Same as musicians. So Patreon style package managers look like a way to research more.

[@JustLikeBuildingThings]

Really interesting. Does make me think why don't small packages charge small fees, even if it's £2 a month but it has 500,000 users... that ain't too bad for everyone is it?

[@arcuscerebellumus8797]

Imo, it's not so much about some patricular piece of the system (i.e. Napster for Music or Opensource for Software) as it's about the system in it's entirety. Exploitation exists not because it's "allowed" for or "enabled" by previous bad decissions, but because it is necessary, so if you want it to stop you need to think not on how you can stop an instance of it, but on how you make it NOT necessary. Trying to fight every particular issue separately just won't lead anywhere, because even if you succeed, while you get busy patching one hole, 3 more appear. I mean, "changing licensing", "introducing billing to package managers" - depending on the implementation, seems like you can just go straight the other direction with all that . Giving middleman power to those platforms, however benevolent they may be now, can make them just as bad as any "app-store" in the future. That being said, you are right in that something needs to change, it's just that there's a devil or two to get flashed out before I'd be comfortable fully accepting your approach (not that my acceptance really changes anything)

[@nonenothingnull]

This is why you opt in to free software instead of open source :)

[@jamesauble8091]

Not at all surprised that Redditors went for the false dichotomy right away.

[@calmhorizons]

I've never really understood the rabid love of no-restrictions Open Source by indie-devs - it has a kind of cargo cult element to it. I can only presume because the early days of tech were so dominated by libertarian minded individuals who it benefited to twist in that direction.

[@clray123]

Because it is really the only way to avoid crap like Microsoft from rising in power.

[@ukyoize]

Are you talking about copyleft or copycenter licenses?

[@CrucialFlowResearch]

​@@ukyoize he's referring to permissive licenses like MIT instead of GPL

[@marektengler6033]

Amazing presentation, I guess resolution of this problem boil down to your ideology. I see this as natural process corps will exploit free labour and are covered by same laws which enable them steal in the first place. I say abolish laws protecting intelectual property… all of them.

[@TheBicPen]

Any particular "dual-license" models you would recommend?

[@larscwallin]

If charging for software is bad, then fine, so is your salary. Have fun working for free. "Act only on that maxim through which you can at the same time will that it should become a universal law"

[@bearwolffish]

Ok but in the same way the internet has been taken from us, it's probably been of undeniable benefit to most of us even its modern form. Everything will be taken and modified to suit the powerful, it's why baked in immutability, resilient protocols with incentives that aren't dependant on trust or honor need to be at the core of projects considerations from inception. Code being available certainly doesn't mean you can't get paid for understanding it, that is a choice of the developer and a narrative we should stop pushing.

[@nandoflorestan]

*dependEnt

[@mishegaz]

Damn, big Ed went open source huh..? Just kidding, relax guys. Great talk!!!

[@ukyoize]

There is no ethical consumption under capitalism.

[@FineWine-v4.0]

So basically use GPL licences

[@sydneysidersammy]

Spotify doesn't pay it's artists either.

[@anderseurenius8496]

This is accidentally correct. Spotify pays the labels. (implications left as an exercise.)

[@sammyfromsydney]

​@@anderseurenius8496 There's no accident here. I'm aware artists are not directly paid. But they do pay the distributor/label a fraction of a cent per stream. While the amount the distributor takes varies it is universally true that only the most popular artists will see enough streams to make anything approaching a living on Spotify.

[@S4ntia60]

Imagine a world where big companies pay per package download as they make their client advertisers do for clicks on ards

[@Westernaut]

I assume this catches on.

[@Nimitz_oceo]

Unfortunately with this kind of tone and attitude, literally insulting people and telling them to shut up? Seriously dude?

[@alexhope212009]

ElasticSearch sucks, please avoid it at all costs, bloatware.

[@michaelm1]

"Late-stage capitalist hellhole." Ah, socialism. Of course. 23:22 So basically, he wants to do what he wants and how he wants it, not go to meetings, not respect what his customer wants, and still get paid. Who wouldn't? But the world doesn't work like that. He says we shouldn't be entitled, but this desire of his of getting paid for not doing what your customer (or employer) wants is entitled. I don't like FOSS devs struggling, but I don't think socialism is the answer.

[@igboman2860]

Yeah the buggy man socialism.

[@ukyoize]

Why not?

[@DanielTMLandry]

If he makes something that a huge corporation is using, or thousands of smaller corporations are using, then he is respecting what the customer wants. If they didn't want it, they wouldn't be using it, no? FOSS devs are making things that they want to make that are simultaneously what customers want. Going to meetings is kind of irrelevant. And this is definitely not socialism. This isn't social ownership of means of production, it's pure capitalism and copyright. It's just small authors thinking that they should have the right to be paid for their work and exploring models that that could be achieved.

[@krazeemonkee]

later this year, i will be proposing my solution to this problem ~ a 4peace license that will keep information forever-free, in both forms [💰, 🕊] + where profits from goodẽs will only be distributed to contributors, not profiteers [marketers/advertisers/businessmen] ~ the new monetization model to accompany this license may also prove that it is possible for society to be richer than ever while also being freer than ever 💸 a system composed entirely of community [creators/curators/contributors] + that’s fueled only by pursuing passion ❤️‍🔥

[@Kobold666]

Ok

[@bobweiram6321]

Is the weed you're smoking free?

[@igboman2860]

So was Bill Gates right about open source after all?