3 ms·

This might be a controversial opinion, but with the current Russian invasion of Ukraine and tensions between East/West, forking a project like Nginx to be maint

This might be a controversial opinion, but with the current Russian invasion of Ukraine and tensions between East/West, forking a project like Nginx to be maintained by a Russian company, by a person living in Russia, raises additional questions, especially considering how security critical nginx is when it comes to accessing all traffic of services. I'm thinking here as well about the case of Pavel Durov and his struggles with Russian government. From the post it seems their intention are good, and towards better secured software, and against business interfering with security. But the part where they say "I no longer able to control which changes are made in nginx within F5" might be a good thing. Should a single person have that much control over a critical piece of infrastructure?

justsomehnguy 3y ago
Like some guy from Finland?
- sergioisidoro 3y ago
  To the best of my knowledge, Finnish government hasn't made any attempts at interfering with software development built in Finland, or spying on software users. The same cannot be said of Russia. I'm not saying Russian people cannot make safe and secure software, just saying that people living in Russia have historically been targets of pressure. * and to be honest, the USA and China do not have the cleanest of records either.
- tipiirai 3y ago
  Pretty sure this is a reference to Linus Torwalds
sneak 3y ago
The same argument based on the “Russia vs the global west” narrative can be leveled perfectly accurately against western-citizen maintained software. Everyday Russian developers are no more or less involved in their country’s empire-building than everyday American developers are in theirs (lest we forget about the 12(!) foreign countries in which US forces are currently invading). “Russian” is not synonymous with “suspect”; or, if indeed it is, perhaps “American” should be, too.

justsomehnguy 3y ago

Like some guy from Finland?

sergioisidoro 3y ago
To the best of my knowledge, Finnish government hasn't made any attempts at interfering with software development built in Finland, or spying on software users. The same cannot be said of Russia. I'm not saying Russian people cannot make safe and secure software, just saying that people living in Russia have historically been targets of pressure. * and to be honest, the USA and China do not have the cleanest of records either.
tipiirai 3y ago
Pretty sure this is a reference to Linus Torwalds

sneak 3y ago

The same argument based on the “Russia vs the global west” narrative can be leveled perfectly accurately against western-citizen maintained software. Everyday Russian developers are no more or less involved in their country’s empire-building than everyday American developers are in theirs (lest we forget about the 12(!) foreign countries in which US forces are currently invading). “Russian” is not synonymous with “suspect”; or, if indeed it is, perhaps “American” should be, too.