Ethical (open) source (licenses)

    As I’ve said recently elsewhere, I don’t think technical projects do a good enough job to proactively defensively license their outputs. This, I’d say, is why we can’t have nice things.

    While I agree with the sentiment around ‘ethical source’ models, the philosopher in me would argue that it’s an absolute minefield.

    Ethical impulses aren’t new to software. The Free Software Foundation advocates for a “struggle against for-profit corporate control” and against restrictions on users’ freedom to inspect and modify code in the products they buy. It was started after its founder, Richard Stallman, found he was unable to repair his broken printer because he was unable to edit its proprietary code. However, the open-source movement distanced itself from this political stance, instead making the case that open source was good for corporations on “pragmatic, business-case grounds.” But both free and open-source software allow anyone to use code for any purpose.

    […]

    So what about developers who don’t want their work to be used to help separate kids from their families or create nonconsensual pornography?

    The Ethical Source Movement seeks to use software licenses and other tools to give developers “the freedom and agency to ensure that our work is being used for social good and in service of human rights.” This view emphasizes the rights of developers to have a say in what the fruits of their labor are used for over the rights of any user to use the software for anything. There are a myriad of different licenses: some prohibit software from being used by companies that overwork developers in violation of labor laws, while others prohibit uses that violate human rights or help extract fossil fuels. Is this the thicket Stallman envisions?

    […]

    Will people who intend to commit evil acts with software care what a license says or abide by its terms? Well, it depends. While the anonymous users of the deepfake software I studied might still have used it to create nonconsensual porn, even if the license terms prohibited this, Ehmke suggests that corporate misuse is perhaps a more pressing concern: she points to campaigns to prevent software from being used by Palantir and a 2019 report by Amnesty International that raised concerns that the business models of big name technology companies may threaten human rights. Anonymous users on the internet might not care about licenses, but as Ehmke says and my own experience with lawyers in tech companies confirms, “These companies and their lawyers care very much about what a license says.” So while ethical source licenses might not stop all harmful uses, they might stop some.

    Source: Can you stop your open-source project from being used for evil? | Stack Overflow Blog

    Ethical (open) source (licenses)

    As I’ve said recently elsewhere, I don’t think technical projects do a good enough job to proactively defensively license their outputs. This, I’d say, is why we can’t have nice things.

    While I agree with the sentiment around ‘ethical source’ models, the philosopher in me would argue that it’s an absolute minefield.

    Ethical impulses aren’t new to software. The Free Software Foundation advocates for a “struggle against for-profit corporate control” and against restrictions on users’ freedom to inspect and modify code in the products they buy. It was started after its founder, Richard Stallman, found he was unable to repair his broken printer because he was unable to edit its proprietary code. However, the open-source movement distanced itself from this political stance, instead making the case that open source was good for corporations on “pragmatic, business-case grounds.” But both free and open-source software allow anyone to use code for any purpose.

    […]

    So what about developers who don’t want their work to be used to help separate kids from their families or create nonconsensual pornography?

    The Ethical Source Movement seeks to use software licenses and other tools to give developers “the freedom and agency to ensure that our work is being used for social good and in service of human rights.” This view emphasizes the rights of developers to have a say in what the fruits of their labor are used for over the rights of any user to use the software for anything. There are a myriad of different licenses: some prohibit software from being used by companies that overwork developers in violation of labor laws, while others prohibit uses that violate human rights or help extract fossil fuels. Is this the thicket Stallman envisions?

    […]

    Will people who intend to commit evil acts with software care what a license says or abide by its terms? Well, it depends. While the anonymous users of the deepfake software I studied might still have used it to create nonconsensual porn, even if the license terms prohibited this, Ehmke suggests that corporate misuse is perhaps a more pressing concern: she points to campaigns to prevent software from being used by Palantir and a 2019 report by Amnesty International that raised concerns that the business models of big name technology companies may threaten human rights. Anonymous users on the internet might not care about licenses, but as Ehmke says and my own experience with lawyers in tech companies confirms, “These companies and their lawyers care very much about what a license says.” So while ethical source licenses might not stop all harmful uses, they might stop some.

    Source: Can you stop your open-source project from being used for evil? | Stack Overflow Blog

    Is this a Signal backdoor?

    Maybe this is nothing. Maybe it’s something. But when an Open Source messaging app claims to need to make part of it closed source, maybe there’s something going on?

    There are plenty of Open Souce solutions for email and commenting systems, so Free and Open Source (FLOSS) enthusiasts are entirely justified in wondering: is this a government backdoor?

    We build Signal in the open, with publicly available source code for our applications and servers. To keep Signal a free global communication service without spam, we must depart from our totally-open posture and develop one piece of the server in private: a system for detecting and disrupting spam campaigns. Unlike encryption protocols, which are designed to be provably secure even if everyone knows how they work, spam detection is an ongoing chore for which there is no concrete resolution and for which transparency is a major disadvantage. If we put this code on the Internet alongside everything else, spammers would just read it and adjust their tactics to gain an advantage in the cat-and-mouse game of keeping spam off the network. The Signal protocols, cryptography, and source code are peer reviewed, shared for independent inspection, and provably private by design. We are bound by these security guarantees, so that your conversations and contacts remain as private and protected as ever, even if we keep spam-fighting tools out of sight.
    Source: Improving first impressions on Signal | Signal blog

    The future of closed, proprietary technology is within your body

    Referencing a recent article in The New York Times, and using a metaphor from his honeymoon in Cancun, Purism's Chief Security Officer raises some important questions about the closed/open future of technology:

    Think about the future of computers over the next fifty years. Computers will become even more ubiquitous, not just embedded in all of the things around us, but embedded inside us. With advances in neural-computer interfaces, there is a high likelihood that we will be connecting computers directly to our brains within our lifetimes. Which tech company would you trust to control your neural implant?

    If a computer can read and write directly to your brain, does it change how you feel about vendors controlling which software you can use or whether you can see the code? Does it change how you feel about vendors subsidizing hardware and software with ads or selling data they access through your computer? Does it change how you feel about government regulation of technology?

    Kyle Rankin, Tourists on Tech's Toll Roads

    Open source is as much about culture as it is about code

    The talented Abby Cabunoc Mayes, who I worked with when I was at the Mozilla Foundation (and who I caught up with briefly at MozFest), was interviewed recently by TechRepublic. I like the way she frames the Open Source movement:

    I like to think the movement really came together with The Cathedral and the Bazaar, an essay by Eric Raymond. And he compared the two ideas. There's the cathedral, or free software, where a small group of people are putting together a big cathedral that anyone can come to, and attend a service or whatever. He compared that to a bazaar, where everyone is co-creating. There's no real structure, you can set up a table wherever you want. You can haggle with other people. So open source, he really compared that to the Linux foundation at the time, where he was seeing so much delegation, so many people taking on tasks that would have been closed, in the cathedral model. So that idea that anyone can get involved, and anyone can participate, is really that key. Rather than just giving away something for free.
    If you do an image search for Eric Raymond, you'll find some of him holding guns, as he's an enthusiast. I don't like guns, nor do many people, but I'd like to think we can separate someone's ideas about organising from their thoughts in a different area. I know some would beg to differ.

    The interviewer goes on to ask Abby what the advantages of working openly are:

    There's a lot more buy-in from people. And having this distributed model, where anyone can take a part of this, and anyone can be involved in running the project, really helps keep the power not centralized, but really distributed. And so, you can see what's happening to your data. So there's a lot of advantages that way, and a lot more trust with the population. And I think this is where innovation happens. When everyone can be a part of something, and where everyone can submit the best ideas. And I think we saw that in the scientific revolution, when the academic journals started. And people were publishing their research, and then letting other people use that and build upon that and discover more things. We saw the same thing happen with open source. Where you can really take this and use and do whatever you want with it.
    I think it's important to keep linking and talking about this kind of stuff. Unfortunately, I feel like our cultural default is to try and take all the credit and work in silos.

    Source: TechRepublic

    Git yourself off that platform!

    This week, tens of thousands of open source projects migrated their codebase away from GitHub to alternatives such as GitLab. Why? Because Microsoft announced that they’ve bought GitHub for $7.5 billion.

    For those who don’t spend time in the heady world of software and web development, that sounds like a lot of money for something with a silly name. It will hopefully make things a little clearer to explain that Git is described by Wikipedia in the following way:

    Git is a version control system for tracking changes in computer files and coordinating work on those files among multiple people. It is primarily used for source code management in software development, but it can be used to keep track of changes in any set of files. As a distributed revision control system it is aimed at speed, data integrity, and support for distributed, non-linear workflows.
    Despite GitHub not being open source, it did, until this week host most of the world's open source projects. You can currently use GitHub for free if your project's code is public, and the company sells the ability to create private repositories. As far as I'm aware it's never turned a profit.

    I’ve seen lots of reactions to the Microsoft acquistion news, but one of the more insightful posts comes from Louis-Philippe Véronneau. Like me, he doesn’t trust Microsoft at all.

    Some people might be fine with Microsoft's takeover, but to me it's the straw that breaks the camel's back. For a few years now, MS has been running a large marketing campaign on how they love Linux and suddenly decided to embrace Free Software in all of its forms. More like MS BS to me.

    Let us take a moment to remind ourselves that:

    • Windows is still a huge proprietary monster that rips billions of people from their privacy and rights every day.
    • Microsoft is known for spreading FUD about "the dangers" of Free Software in order to keep governments and schools from dropping Windows in favor of FOSS.
    • To secure their monopoly, Microsoft hooks up kids on Windows by giving out "free" licences to primary schools around the world. Drug dealers use the same tactics and give out free samples to secure new clients.
    • Microsoft's Azure platform - even though it can run Linux VMs - is still a giant proprietary hypervisor.
    Yep.

    I’m thankful that we’re now starting the MoodleNet project in a post-GDPR and post-GitHub world. We’ll be using GitLab — initially via their hosted service, but longer-term as a self-hosted solution — and as many open-source products and services as possible.

    Interestingly, Véronneau notes that you can use Debian’s infrastructure (terms) or RiseUp’s infrastructure (terms) if your project aligns with their ethos.

    Source: Louis-Philippe Véronneau

    How to choose an open license for your project

    I’m so used to working openly by default that I sometimes forget that for many (most?) people it’s a new, and sometimes quite scary, step.

    Alfonso Sánchez Uzábal pointed to choosealicense.com from GitHub, which makes it simple to choose an open license for your software project. Moodle, for example, is GPL but it gives other examples such as MIT and Apache.

    For everything other than software, you’re probably best off with Creative Commons licenses. I’ve been using these for the last fifteen years now on my work and highly recommend them.

    Slack's bait-and-switch?

    I remember the early days of Twitter. It was great, as there were many different clients, both native apps and web-based ones. There was lots of innovation in the ecosystem and, in fact, the ‘pull-to-refresh’ feature that’s now baked into every social app on a touchscreen device was first created for a third-party Twitter client.

    Twitter then, of course, once it had reached critical mass and mainstream adoption, killed off that third party ecosystem to ‘own the experience’. It looks like Slack, the messaging app for teams, is doing something similar by turning off support for IRC and XMPP gateways:

    As Slack has evolved over the years, we’ve built features and capabilities — like Shared Channels, Threads, and emoji reactions (to name a few) — that the IRC and XMPP gateways aren’t able to handle. Our priority is to provide a secure and high-quality experience across all platforms, and so the time has come to close the gateways.
    A number of people weren't happy about this, notably those who rely on the superior accessibility features available through IRC and XMPP. A software developer and consultant by the name of JC Brand takes Slack to task:
    We all know the real reason Slack has closed off their gateways. Their business model dictates that they should.

    Slack’s business model is to record everything said in a workspace and then to sell you access to their record of your conversations.

    They’re a typical walled garden, information silo or Siren Server

    So they have to close everything off, to make sure that people can’t extract their conversations out of the silo.

    We saw it with Google, who built Gtalk on XMPP and even federated with other XMPP servers, only to later stop federation and XMPP support in favour of trying to herd the digital cattle into the Google+ enclosure.

    Facebook, who also built their chat app on XMPP at first allowed 3rd party XMPP clients to connect and then later dropped interoperability.

    Twitter, although not using or supporting XMPP, had a vibrant 3rd party client ecosystem which they killed off once they felt big enough.

    Slack, like so many others before them, pretend to care about interoperability, opening up just so slightly, so that they can lure in people with the promise of “openness”, before eventually closing the gate once they’ve achieved sufficient size and lock-in.

    I’m definitely on the side of open source people/projects here, but it’s worth noting that the author uses the post to promote the solution he’s been developing. And why not?

    There’s a comment below the post which makes, I think, a good point:

    I'm betting this decision wasn't made by the same folks who were at Slack (or Facebook, Google, etc) and thought adding support for the open protocols was a good thing. I bet the decision is a product of time over any attempt to trick anyone. Over time people change roles, leave, and slowly new leadership emerges. Outside pressures (market growth, investors) require a change in priority and the org shifts away from supporting things that had low adoption and ongoing maintenance cost.

    So I don’t think it’s as malicious as the author implies (Bait and Switch) as that requires some nefarious planning and foresight. I think it’s more likely to be business/product evolution, which still sucks for adopters and the free net, but not as maleficent. Just, unfortunately, the nature of early tech businesses maturing into Just Another Business.

    Indeed.

    Source: Opkode

    Firefox OS lives on in The Matrix

    I still have a couple of Firefox OS phones from my time at Mozilla. The idea was brilliant: using the web as the platform for smartphones. The execution, in terms of the partnership and messaging to the market… not so great.

    Last weekend, I actually booted up a device as my daughter was asking about ‘that orange phone you used to let me play with sometimes’. I noticed that Mozilla are discontinuing the app marketplace next month.

    All is not lost, however, as open source projects can never truly die. This article reports on a ‘fork’ of Firefox OS being used to resurrect one of my favourite-ever phones, which was used in the film The Matrix:

    Quietly, a company called KaiOS, built on a fork of Firefox OS, launched a new version of the OS built specifically for feature phones, and today at MWC in Barcelona the company announced a new wave of milestones around the effort that includes access to apps from Facebook, Twitter and Google in the form of its Voice Assistant, Google Maps, and Google Search; as well as a list of handset makers who will be using the OS in their phones, including HMD/Nokia (which announced its 8110 yesterday), Bullitt, Doro and Micromax; and Qualcomm and Spreadtrum for processing on the inside.
    I think I'm going to have to buy the new version of the Nokia 8110 just... because.

    Source: TechCrunch

     

    On the death of Google/Apache Wave (and the lessons we can learn from it)

    This article is entitled ‘How not to replace email’ and details both the demise of Google Wave and it’s open source continuation, Apache Wave:

    As of a month ago, the Apache Wave project is “retired”. Few people noticed; in the seven years that Wave was an Apache Incubator open source project, it never had an official release, and was stuck at version 0.4-rc10 for the last three years.
    Yes, I know! There's been a couple of times over the last few years when I've thought that Wave would have been perfect for a project I was working on. But the open source version never seemed to be 'ready'.

    The world want ready for it in 2010, but now would seem to be the perfect time for something like Wave:

    2017 was a year of rapidly growing interest in federated communications tools such as Mastodon, which is an alternative to Twitter that doesn’t rely on a single central corporation. So this seems like a good time to revisit an early federated attempt to reinvent how we use the internet to communicate with each other.
    As the author notes, the problem was the overblown hype around it, causing Google to pull it after just three months. He quoted a friend of his who at one time was an active user:
    We’d start sending messages with lots of diagrams, sketches, and stuff cribbed from Google Images, and then be able to turn those sort of longer-than-IM-shorter-than-email messages into actual design documents gradually.

    In fact, I’d argue that even having a system that’s a messaging system designed for “a paragraph or two” was on its own worthwhile: even Slack isn’t quite geared toward that, and contrariwise, email […] felt more heavyweight than that. Wave felt like it encouraged the right amount of information per message.

    I feel this too, and it’s actually something we’ve been talking about for internal communications at Moodle. Telegram, (which we use kind of like Slack) is good for short, sharp communication, but there’s a gulf between that and, say, an email conversation or threaded forum discussion.

    Perhaps this is the sweet spot for the ‘social networking’ aspect of Project MoodleNet?

    Wave’s failure didn’t have anything to do with the ideas that went into it.

    Those ideas and goals are sound, and this failure even provided good evidence that there’s a real need for something kind of like Wave: fifty thousand people signed a petition to “Save Google Wave” after Google announced they were shutting Wave down. Like so many petitions, it didn’t help (obviously), but if a mediocre implementation got tens of thousands of passionate fans, what could a good implementation do?

    Helpfully, the author outlines some projects he’s been part of, after stating (my emphasis):

    I’d say the single most important lesson to take away here, for a technology project at least, is that interoperability is key.
    • Assume that no matter how amazing your new tech is, people are going to adopt it slowly.
    • Give your early adopters every chance you can to use your offering together with the existing tools that they will continue to need in order to work with people who haven’t caught up yet.
    • And if you’re building a communication tool, make it as simple as possible for others to build compatible tools, because they will expand the network of people your users can communicate with to populations you haven’t thought of and probably don’t understand.
    It's a really useful article with many practical applications (well, for me at least...)

    Source: Jamey Sharp

    The origin of the term 'open source'

    I didn’t used to think that who came up with the name of a thing particularly mattered, nor how it came about.

    I’ve changed my mind, however, as the history of these things also potentially tells you about their future. In this article, Christine Peterson outlines how she came up with the term ‘open source’:

    The introduction of the term "open source software" was a deliberate effort to make this field of endeavor more understandable to newcomers and to business, which was viewed as necessary to its spread to a broader community of users. The problem with the main earlier label, "free software," was not its political connotations, but that—to newcomers—its seeming focus on price is distracting. A term was needed that focuses on the key issue of source code and that does not immediately confuse those new to the concept. The first term that came along at the right time and fulfilled these requirements was rapidly adopted: open source.
    Tellingly, as it was the 1990s, Peterson let a man introduce it for the term to gain traction:
    Toward the end of the meeting, the question of terminology was brought up explicitly, probably by Todd or Eric. Maddog mentioned "freely distributable" as an earlier term, and "cooperatively developed" as a newer term. Eric listed "free software," "open source," and "sourceware" as the main options. Todd advocated the "open source" model, and Eric endorsed this. I didn't say much, letting Todd and Eric pull the (loose, informal) consensus together around the open source name. It was clear that to most of those at the meeting, the name change was not the most important thing discussed there; a relatively minor issue. Only about 10% of my notes from this meeting are on the terminology question.
    From this point, Tim O'Reilly had to agree and popularise it, but:
    Coming up with a phrase is a small contribution, but I admit to being grateful to those who remember to credit me with it. Every time I hear it, which is very often now, it gives me a little happy twinge.

    Source: opensource.com

    Atlas of Hillforts

    This makes me happy.

    Back in 2013, archaeologists at Oxford and Edinburgh teamed up to work on the Atlas of Hillforts. Their four-year mission was identify every single hill fort in Britain and Ireland and their key features. This had never been done before, and as Oxford’s Prof. Gary Lock said it would allow archaeologists to “shed new light on why they were created and how they were used”.
    Although prehistory is 'not my period' as an historian, I'm fascinated by it, and often incorporate looking for a hill fort during my mountain walks.
    When the project was under development, Wikimedia UK was supporting a Wikimedian in Residence (WIR) at the British Library, Andrew Gray. He talked to the the people involved in the project and suggested using Wikipedia to share the results of the project. After all they were going to create a free-to-access online database. Perhaps the information could be used to update Wikipedia’s various lists of hillforts?
    That data is now live. What a resource! The internet, and in particular working openly, is awesome.

    Source: Wikipedia UK

    Open source apps for agile project teams

    A really interesting post about open source apps, most of which I’ve never come across!

    In this list, there are no project management apps, no checklists, and no integrations with GitHub. Just simple ways to organize your thoughts and promote team communication.

    Will be exploring with interest.

    Source: opensource.com

    Barcelona to go open source by 2019

    Great news for the open source community!

    The City has plans for 70% of its software budget to be invested in open source software in the coming year. The transition period, according to Francesca Bria (Commissioner of Technology and Digital Innovation at the City Council) will be completed before the mandate of the present administrators come to an end in Spring 2019.

    It also looks like it could be the start of a movement:

    With this move, Barcelona becomes the first municipality to join the European campaign “Public Money, Public Code“.

    It is an initiative of the Free Software Foundation of Europe and comes after an open letter that advocates that software funded publicly should be free. This call has been supported by more than about 15,000 individuals and more than 100 organizations.

    Source: It’s FOSS

    Mozilla is creating an Open Leadership Map

    The Mozilla Foundation may have shut down pretty much all of its learning programmes, but it’s still doing interesting stuff around Open Leadership. Chad Sansing writes:

    We think of Open Leadership as a set of principles, practices, and skills people can use to mobilize their communities to solve shared problems and achieve shared goals. For example, Mozilla’s web browser, Firefox, was developed with an open code base with community contribution and support.
    They're using the Web Literacy Map (work I led during my time with Mozilla) as a reference point. It's early days, but here's what they've got so far:

    Open Leadership MapThere’s also a white paper which they say will be updated in February 2018. I’m looking forward to seeing where this goes. Along with great work being done at opensource.com’s community around The Open Organization it’s a great time to be a open leader!

    Source: Read, Write, Participate

    2018: the year of Linux on the desktop?

    There’s a perpetual joke in open source circles that next year will be ‘the year of Linux on the desktop’. GNU/Linux, of course, is an operating system that comes in a range of ‘distributions’ (I use Ubuntu and Elementary OS on a range of devices).

    In this article, the author outlines 10 reasons that Linux isn’t used by more people. I think he’s spot-on:

    1. Fragmented market
    2. Lack of special applications
    3. Lack of big name applications
    4. Lack of API and ABI stability
    5. Apple resurgence
    6. Microsoft aggressive response
    7. Piracy
    8. Red Hat mostly stayed away
    9. Canonical business model not working out
    10. Original device manufacturer support
    That being said, I'm all-in on Linux now. I can't imagine going back to the vendor lock-in provided by macOS, Windows, or Chrome OS.

    Source: Christian F.K. Schaller