Asklemmy

There was more drama? I didn't even notice. They're always doing drama.

Yes, bad actors can exist everywhere, it doesn't really help anything but fragment the project and harm it, do we need multiple directed forks ? Fuck no it will be best if everyone can monitor and contribute, I kind of think of it as they do peer reviewing in research and shit, it's always better when more people can view it, that will leave less room for biasing and frankly detect bad actors easily

I get that it's a nice daydream to think of open source projects as existing in some kind of independent, ethereal vacuum just because the code is out there and accessible from any place on Earth. But every software project is (mostly?) dependent on the jurisdiction in one country, in this case it's the US, and so their laws about sanctions and so on apply. And yes, this means that unless conflicts/wars between nations happen to cease, that we will eventually have completely separated blocks of politics/culture/military and also IT. Globalization is over. China will have their own stuff, Russia will have their own stuff, and US+EU will have their own stuff. And none of those countries should continue using high-tech products made by the other because they could be sabotaged and it might be hard to find, so it's best to not use them at all and just cook your own stuff. It's unfortunate, but bound to happen in the current state of the political world.

If someone really wants to use the contribution of the expelled maintainers they can just make their own fork. Part of the Free in FOSS is the freedom to associate or not associate with contributors.

I think the prestige of "maintainers" and contributions/control are what is being torn down. Anyone anywhere is still welcome to contribute, they are simply limited from direct control. They can still fork at any time, anyone can. Getting people to follow your fork is another thing entirely, and your open source code will still likely be incorporated directly or indirectly. The only thing that has changed is the misguided prestige that has grown around the project and is not a required or relevant part of the project as a whole.

Unfortunately no.

I remember the selinux controversy and the nsa trying to slip bad algorithms in.

Yes. I always thought of sanctions as being finance-related, meaning you can't transact with sanctioned groups. I figured it couldn't apply to decision-making/membership in non-profit organizations (that it might somehow violate "free speech" or some shit). Finding out this is not the case is terrifying and one more reason to hate the US (not that we needed more). This might disincentivize some people to contribute to FOSS.

I'm ootl. Quick summary?

Nothing is devoid of global politics.

From what I understand this wasn't a decision dictated by sanctions nor was there any strongarming. Otherwise it would've happend way earlier.

I also think splitting politics and literally anything else doesn't work and is something people who benefit from the discussion (or lack therof) made up.

I just wanted to say that I have the same questions, and it's a relief to see it posted by someone with more courage. I'm too ignorant to contribute to the discussion though. I don't know how a government or private entity could pressure a FOSS project in this way, unless that pressure was put on the project's git platform. At which point the repo just moves elsewhere.

No

@Artemis_Mystique@lemmy.ml Views on the idea, no. But it confirmed my opinion that the current socio-economic system is unfriendly to FLOSS

Everything be it software or anything else is beholden only to those who is the highest bidder. Being FOSS doesn't change anything. This has been true for some time now that Linux and TLF is duty bound to businesses running it.

It had been covert till now, it is the overtness of this action which is surprising to most. I for one am surprised it didnt happen sooner.

I'm not concerned that they followed the best advice of their lawyers to respond to the legal and political challenges that currently exist.

I am concerned that hostile nation states (define those as you will) have made supply chain attacks (remember the xz Utils backdoor) so common that actions like this or worse are becoming necessary and that open source, globally contributed software could be at risk.