4 ms·

> So all your Software Supply Chain ideas? You are not buying from a supplier, you are a raccoon digging through dumpsters for free code. This got a genuine LO

> So all your Software Supply Chain ideas? You are not buying from a supplier, you are a raccoon digging through dumpsters for free code. This got a genuine LOL from me. Bravo. I'm going to repeat my principle on the software supply chain issue: the responsibility for software security and other maintenance rests on those who deploy it. Deployments are the loci of harm from bad software, not projects. Secondarily, the weight of that responsibility should depend on the level of harm resulting and the level of benefit its owner receives. Whatever rules and conventions emerge from this fiasco, it needs to allow people to write software for fun, and even deploy it for fun as long as the damage is contained. And the people paying for maintenance need to be the ones making money from it.

di4na 4y ago
Author here. Yeah a friend quipped that when i explained to them i was writing this post, and i asked them if i could shamelessly steal it and use it. They agreed. So i ran away with it.
- deleted 4y ago
  [deleted]
- bee_rider 4y ago
  It is a nice quip, but is it true? I think Free code is quite unlike garbage, in that most Free software devs do somewhat hope their code will be useful or enjoyable to somebody, right? Garbage is explicitly refuse, you don’t expect anyone will find it useful at all. The raccoons are a nuisance — we actually go to great lengths in some cases to make sure they can’t check out the garbage! People sifting through your garbage are probably up to no good. I think is hard to make an analogy between Free software and a physical thing because most physical things are finite and can’t be copied for free. Maybe Free software is more like a dance — you do your dance to for yourself, and to impress your friends maybe (or maybe as exercise, or some other motivation). You don’t mind if someone copies your dance. You might even help your friends learn it. But you clearly have no obligation to help strangers learn it, and no responsibility if they get hurt trying to do it.
ChrisMarshallNY 4y ago
Reminds me of this quote: > "There’s no free lunch in this world unless you’re willing to run around to different dumpsters to get it." -Stay SaaSy
- andrewflnr 4y ago
  It's good they included the running around. It's easy to forget that you're not only eating garbage, you're working really hard for it.
resonious 4y ago
Yeah I always found it pretty funny how easily we add libraries at work. We do a lot of code review and ensure near-100% line coverage, and yet we don't hold libraries to any standard at all. You can just add libraries and nobody will bat an eyelash. I've peeked into the source code of many of these libraries to find that they're often questionably architected, untested, or otherwise just not up to the standard to which we hold our own code.
deleted 4y ago
[deleted]

di4na 4y ago

Author here. Yeah a friend quipped that when i explained to them i was writing this post, and i asked them if i could shamelessly steal it and use it. They agreed. So i ran away with it.

deleted 4y ago
[deleted]
bee_rider 4y ago
It is a nice quip, but is it true? I think Free code is quite unlike garbage, in that most Free software devs do somewhat hope their code will be useful or enjoyable to somebody, right? Garbage is explicitly refuse, you don’t expect anyone will find it useful at all. The raccoons are a nuisance — we actually go to great lengths in some cases to make sure they can’t check out the garbage! People sifting through your garbage are probably up to no good. I think is hard to make an analogy between Free software and a physical thing because most physical things are finite and can’t be copied for free. Maybe Free software is more like a dance — you do your dance to for yourself, and to impress your friends maybe (or maybe as exercise, or some other motivation). You don’t mind if someone copies your dance. You might even help your friends learn it. But you clearly have no obligation to help strangers learn it, and no responsibility if they get hurt trying to do it.

ChrisMarshallNY 4y ago

Reminds me of this quote: > "There’s no free lunch in this world unless you’re willing to run around to different dumpsters to get it." -Stay SaaSy

andrewflnr 4y ago
It's good they included the running around. It's easy to forget that you're not only eating garbage, you're working really hard for it.

resonious 4y ago

Yeah I always found it pretty funny how easily we add libraries at work. We do a lot of code review and ensure near-100% line coverage, and yet we don't hold libraries to any standard at all. You can just add libraries and nobody will bat an eyelash. I've peeked into the source code of many of these libraries to find that they're often questionably architected, untested, or otherwise just not up to the standard to which we hold our own code.

deleted 4y ago

[deleted]